<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="55">
<package pkgid="9284f9062f0e07a0422c16316b2b0195321e363f" name="flash-player" arch="src">
<version epoch="0" ver="10.2.152.26" rel="3.2.1"/>
<changelog author="meissner@suse.de" date="1297252800">- updated to 10.2.152.26 (bnc#670531):
  * CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561,
  * CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,
  * CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607,
  * CVE-2011-0608
  * http://www.adobe.com/support/security/bulletins/apsb11-02.html</changelog>
<changelog author="dmueller@suse.de" date="1288872000">- update to 10.1.102.64  (bnc#650145):
  * CVE-2010-3654</changelog>
<changelog author="dmueller@suse.de" date="1284984000">- update to 10.1.85.3 (bnc#639541):
  * CVE-2010-2884</changelog>
<changelog author="dmueller@suse.de" date="1281441600">- update to 10.1.82.76 (bnc#630108):
  * CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,
  CVE2010-2215, CVE-2010-2216</changelog>
<changelog author="dmueller@suse.de" date="1276257600">- update to 10.1.53.64 (bnc#612063):
  * CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160,
  CVE-2010-2161, CVE-2010-2162, CVE-2010-2163, CVE-2010-2164,
  CVE-2010-2165, CVE-2010-2166, CVE-2010-2167, CVE-2010-2169,
  CVE-2010-2170, CVE-2010-2171, CVE-2010-2172, CVE-2010-2173,
  CVE-2010-2174, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177,
  CVE-2010-2178, CVE-2010-2179, CVE-2010-2180, CVE-2010-2181,
  CVE-2010-2182, CVE-2010-2183, CVE-2010-2184, CVE-2010-2185,
  CVE-2010-2186, CVE-2010-2187, CVE-2010-2188, CVE-2010-2189</changelog>
<changelog author="dmueller@suse.de" date="1266062400">- update to 10.0.45.2 (bnc#578997):
  * CVE-2010-0186, CVE-2010-0187</changelog>
<changelog author="dmueller@suse.de" date="1260964800">- also provide libflashsupport, otherwise patch update
  complains about the obsolete</changelog>
<changelog author="lnussel@suse.de" date="1260878400">- don't obsolete libflashsupport for now (bnc#560259)</changelog>
<changelog author="dmueller@suse.de" date="1260360000">- update to 10.0.42.34 (bnc#560259):
  * CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798,
  CVE-2009-3799, CVE-2009-3800, CVE-2009-3951</changelog>
<changelog author="crrodriguez@opensuse.org" date="1257508800">- flash player makes no sound in x86_64 if libasound.so.2
  is not installed and pulseaudio is disabled.</changelog>
<changelog author="sreeves@novell.com" date="1254398400">- fix bnc#539656 - obsolete libflashsupport</changelog>
<changelog author="dmueller@suse.de" date="1249560000">- also provide flash-plugin</changelog>
<changelog author="dmueller@novell.com" date="1249041600">- update to 10.0.32.18 (bnc#524508):
  * CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493,
  CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866,
  CVE-2009-1867, CVE-2009-1868, CVE-2009-1869, CVE-2009-1870</changelog>
<changelog author="beineri@opensuse.org" date="1245240000">- fix capitalization of start menu entry</changelog>
<changelog author="dmueller@suse.de" date="1235563200">- update to 10.0.22.87 (bnc#476907):
  * CVE-2009-0519, CVE-2009-0520,CVE-2009-0522, CVE-2009-0114
  CVE-2009-0521</changelog>
<changelog author="dmueller@suse.de" date="1229601600">- update to 10.0.15.3 (bnc#458573):
  CVE-2008-5499</changelog>
<changelog author="dmueller@suse.de" date="1226491200">- require libcurl.so.4 (bnc#443772)</changelog>
<changelog author="dmueller@suse.de" date="1225713600">- strip rpath from standalone player as well</changelog>
<changelog author="ro@suse.de" date="1225108800">- fix typo in specfile</changelog>
<changelog author="dmueller@suse.de" date="1224072000">- update to 10.0.12.36 (bnc#435201):
  * fixes for CVE-2007-6243, CVE-2008-3873, CVE-2007-4324,
  CVE-2008-4401, CVE-2008-4503
  * http://www.adobe.com/products/flashplayer/</changelog>
<changelog author="dmueller@suse.de" date="1207742400">- update to 9.0.124.0 (bnc#376639)
  * CVE-2007-6637</changelog>
<changelog author="dmueller@suse.de" date="1196769600">- update to 9.0.115.0 (#310213)</changelog>
<changelog author="dmueller@suse.de" date="1184155200">- update to 9.0.48.0 (#257905,
  CVE-2007-3456, CVE-2007-3457, CVE-2007-2022)</changelog>
<changelog author="dmueller@suse.de" date="1176379200">- add standalone flash player binary (#263332)</changelog>
<changelog author="dmueller@suse.de" date="1169035200">- update to 9.0.31.0 (FATE #301150)</changelog>
<changelog author="coolo@suse.de" date="1165492800">- update to 7.0.69.0 (CVE-2006-5330, #213291)</changelog>
<changelog author="dmueller@suse.de" date="1158148800">- update to 7.0.68.0 (CVE-2006-3311, CVE-2006-3587, CVE-2006-3588,
  [#205382])</changelog>
<changelog author="ltinkl@suse.cz" date="1142510400">- fix #158227 - VUL-0: vulnerability in flash-player
  (Flash installer updated to 7.0.63.0)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="dmueller@suse.de" date="1127995200">- add norootforbuild</changelog>
<changelog author="clahey@suse.de" date="1090843200">- Update to version 7.0.25.0.</changelog>
<changelog author="aj@suse.de" date="1080734400">- Update to version 6.0r81:
  * flash scripting fixes
  * video quality and playback speed improvements
  * performance improvements</changelog>
<changelog author="ro@suse.de" date="1056110400">- don't include dir in filelist, is in filesystem package now</changelog>
<changelog author="ro@suse.de" date="1047816000">- security update to version 6.0r79</changelog>
<changelog author="ro@suse.de" date="1046088000">- created (obsoletes old netscape-plugins package)</changelog>
</package>
<package pkgid="5a39c28693e780501e7a758286d68d370b3a60ff" name="flash-player" arch="i586">
<version epoch="0" ver="10.2.152.26" rel="3.2.1"/>
<changelog author="meissner@suse.de" date="1297252800">- updated to 10.2.152.26 (bnc#670531):
  * CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561,
  * CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,
  * CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607,
  * CVE-2011-0608
  * http://www.adobe.com/support/security/bulletins/apsb11-02.html</changelog>
<changelog author="dmueller@suse.de" date="1288872000">- update to 10.1.102.64  (bnc#650145):
  * CVE-2010-3654</changelog>
<changelog author="dmueller@suse.de" date="1284984000">- update to 10.1.85.3 (bnc#639541):
  * CVE-2010-2884</changelog>
<changelog author="dmueller@suse.de" date="1281441600">- update to 10.1.82.76 (bnc#630108):
  * CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,
  CVE2010-2215, CVE-2010-2216</changelog>
<changelog author="dmueller@suse.de" date="1276257600">- update to 10.1.53.64 (bnc#612063):
  * CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160,
  CVE-2010-2161, CVE-2010-2162, CVE-2010-2163, CVE-2010-2164,
  CVE-2010-2165, CVE-2010-2166, CVE-2010-2167, CVE-2010-2169,
  CVE-2010-2170, CVE-2010-2171, CVE-2010-2172, CVE-2010-2173,
  CVE-2010-2174, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177,
  CVE-2010-2178, CVE-2010-2179, CVE-2010-2180, CVE-2010-2181,
  CVE-2010-2182, CVE-2010-2183, CVE-2010-2184, CVE-2010-2185,
  CVE-2010-2186, CVE-2010-2187, CVE-2010-2188, CVE-2010-2189</changelog>
<changelog author="dmueller@suse.de" date="1266062400">- update to 10.0.45.2 (bnc#578997):
  * CVE-2010-0186, CVE-2010-0187</changelog>
<changelog author="dmueller@suse.de" date="1260964800">- also provide libflashsupport, otherwise patch update
  complains about the obsolete</changelog>
<changelog author="lnussel@suse.de" date="1260878400">- don't obsolete libflashsupport for now (bnc#560259)</changelog>
<changelog author="dmueller@suse.de" date="1260360000">- update to 10.0.42.34 (bnc#560259):
  * CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798,
  CVE-2009-3799, CVE-2009-3800, CVE-2009-3951</changelog>
<changelog author="crrodriguez@opensuse.org" date="1257508800">- flash player makes no sound in x86_64 if libasound.so.2
  is not installed and pulseaudio is disabled.</changelog>
<changelog author="sreeves@novell.com" date="1254398400">- fix bnc#539656 - obsolete libflashsupport</changelog>
<changelog author="dmueller@suse.de" date="1249560000">- also provide flash-plugin</changelog>
<changelog author="dmueller@novell.com" date="1249041600">- update to 10.0.32.18 (bnc#524508):
  * CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493,
  CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866,
  CVE-2009-1867, CVE-2009-1868, CVE-2009-1869, CVE-2009-1870</changelog>
<changelog author="beineri@opensuse.org" date="1245240000">- fix capitalization of start menu entry</changelog>
</package>
<package pkgid="c6ff2f78d19e8eb3892b7fd3153f697f209c0cbb" name="pullin-flash-player" arch="src">
<version epoch="0" ver="11.4.1" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1298462400">- trigger install of flash-player</changelog>
<changelog author="dmueller@suse.de" date="1279540800">- bump version to 11.4</changelog>
<changelog author="dmueller@suse.de" date="1275998400">- bump version to 11.3</changelog>
<changelog author="coolo@suse.de" date="1239192000">- don't make it noarch
- recommend nspluginwrapper on x86_64 (bnc#480824)</changelog>
<changelog author="coolo@suse.de" date="1228219200">- fixed typo in version</changelog>
<changelog author="coolo@suse.de" date="1225108800">- initial package</changelog>
</package>
<package pkgid="f5910c53e883fe4788db7e32194b5fc02c830621" name="pullin-flash-player" arch="i586">
<version epoch="0" ver="11.4.1" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1298462400">- trigger install of flash-player</changelog>
<changelog author="dmueller@suse.de" date="1279540800">- bump version to 11.4</changelog>
<changelog author="dmueller@suse.de" date="1275998400">- bump version to 11.3</changelog>
<changelog author="coolo@suse.de" date="1239192000">- don't make it noarch
- recommend nspluginwrapper on x86_64 (bnc#480824)</changelog>
<changelog author="coolo@suse.de" date="1228219200">- fixed typo in version</changelog>
<changelog author="coolo@suse.de" date="1225108800">- initial package</changelog>
</package>
<package pkgid="14b3a143d82c734b237047f7514272c306cb35dc" name="pullin-flash-player" arch="x86_64">
<version epoch="0" ver="11.4.1" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1298462400">- trigger install of flash-player</changelog>
<changelog author="dmueller@suse.de" date="1279540800">- bump version to 11.4</changelog>
<changelog author="dmueller@suse.de" date="1275998400">- bump version to 11.3</changelog>
<changelog author="coolo@suse.de" date="1239192000">- don't make it noarch
- recommend nspluginwrapper on x86_64 (bnc#480824)</changelog>
<changelog author="coolo@suse.de" date="1228219200">- fixed typo in version</changelog>
<changelog author="coolo@suse.de" date="1225108800">- initial package</changelog>
</package>
<package pkgid="44342e68346896519e58a553070f73ff5a10f1e3" name="apache2-mod_python" arch="x86_64">
<version epoch="0" ver="3.3.1" rel="161.3.1"/>
<changelog author="draht@suse.de" date="1298980800">- apache2-mod_python-bnc675927.patch fixes bnc#675927:
  python segfaults on openSUSE 11.4 when used with mod_python</changelog>
<changelog author="opensuse@dstoecker.de" date="1273147200">- fix md5 deprecation warning</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242734400">- spec file cosmetic fixes
- pass -j
- use in-place sed (sed -i)
- added hacks for building with python2.5 on SLE 9</changelog>
<changelog author="poeml@suse.de" date="1219147200">- fix build with apr 1.3.2 and later
  mod_python-3.3.1-bucket-brigade.patch
  http://www.mail-archive.com/dev@apr.apache.org/msg20588.html</changelog>
<changelog author="poeml@suse.de" date="1176465600">- update to 3.3.1
  | New Features
  | - (MODPYTHON-103) New req.add_output_filter(),
  |   req.add_input_filter(), req.register_output_fiter(),
  |   req.register_input_filter() methods. These allows the dynamic
  |   registration of filters and the attaching of filters to the
  |   current request.
  | - (MODPYTHON-104) Support added for using Python in content being
  |   passed through &quot;INCLUDES&quot; output filter, or as more commonly
  |   referred to server side include (SSI) mechanism.
  | - (MODPYTHON-108) Added support to cookies for httponly attribute,
  |   an extension originally created by Microsoft, but now getting
  |   more widespread use in the battle against cross site-scripting
  |   attacks.
  | - (MODPYTHON-118) Now possible using the PythonImport directive to
  |   specify the name of a function contained in the module to be
  |   called once the designated module has been imported.
  | - (MODPYTHON-124) New req.auth_name() and req.auth_type() methods.
  |   These return the values associated with the AuthName and AuthType
  |   directives respectively. The req.ap_auth_type has now also been
  |   made writable so that it can be set by an authentication handler.
  | - (MODPYTHON-130) Added req.set_etag(), req.set_last_modified() and
  |   req.update_mtime() functions as wrappers for similar functions
  |   provided by Apache C API. These are required to effectively use
  |   the req.meets_condition() function.  The documentation for
  |   req.meets_condition() has also been updated as what it previously
  |   described probably wouldn't actually work.
  | - (MODPYTHON-132) New req.construct_url() method. Used to construct
  |   a fully qualified URI string incorporating correct scheme, server
  |   and port.
  | - (MODPYTHON-144) The &quot;apache.interpreter&quot; and &quot;apache.main_server&quot;
  |   attributes have been made publically available. These were
  |   previously private and not part of the public API.
  | - (MODPYTHON-149) Added support for session objects that span
  |   domains.
  | - (MODPYTHON-153) Added req.discard_request_body() function as
  |   wrapper for similar function provided by Apache C API. The
  |   function tests for and reads any message body in the request,
  |   simply discarding whatever it receives.
  | - (MODPYTHON-164) The req.add_handler(),
  |   req.register_input_filter() and req.register_output_filter()
  |   methods can now take a direct reference to a callable object as
  |   well a string which refers to a module or module::function
  |   combination by name.
  | - (MODPYTHON-165) Exported functions from mod_python module to be
  |   used in other third party modules for Apache. The purpose of
  |   these functions is to allow those other modules to access the
  |   mechanics of how mod_python creates interpreters, thereby
  |   allowing other modules to also embed Python and for there not to
  |   be a conflict with mod_python.
  | - (MODPYTHON-170) Added req._request_rec, server._server_rec and
  |   conn._conn_rec semi private members for getting accessing to
  |   underlying Apache struct as a Python CObject. These can be used
  |   for use in implementing SWIG bindings for lower level APIs of
  |   Apache. These members should be regarded as experimental and
  |   there are no guarantees that they will remain present in this
  |   specific form in the future.
  | - (MODPYTHON-193) Added new attribute available as
  |   req.hlist.location. For a handler executed directly as the result
  |   of a handler directive within a Location directive, this will be
  |   set to the value of the Location directive. If LocationMatch, or
  |   wildcards or regular expressions are used with Location, the
  |   value will be the matched value in the URL and not the pattern.
  |
  | Improvements
  | - (MODPYTHON-27) When using mod_python.publisher, the __auth__()
  |   and __access__() functions and the __auth_realm__ string can now
  |   be nested within a class method as a well a normal function.
  | - (MODPYTHON-90) The PythonEnablePdb configuration option will now
  |   be ignored if Apache hasn't been started up in single process
  |   mode.
  | - (MODPYTHON-91) If running Apache in single process mode with PDB
  |   enabled and the &quot;quit&quot; command is used to exit that debug
  |   session, an exception indicating that the PDB session has been
  |   aborted is raised rather than None being returned with a
  |   subsequent error complaining about the handler returning an
  |   invalid value.
  | - (MODPYTHON-93) Improved util.FieldStorage efficiency and made the
  |   interface more dictionary like.
  | - (MODPYTHON-101) Force an exception when handler evaluates to
  |   something other than None but is otherwise not callable.
  |   Previously an exception would not be generated if the handler
  |   evaluated to False.
  | - (MODPYTHON-107) Neither mod_python.publisher nor mod_python.psp
  |   explicitly flush output after writing the content of the response
  |   back to the request object. By not flushing output it is now
  |   possible to use the &quot;CONTENT_LENGTH&quot; output filter to add a
  |   &quot;Content-Length&quot; header.
  | - (MODPYTHON-111) Note made in session documentation that a save is
  |   required to avoid session timeouts.
  | - (MODPYTHON-125) The req.handler attribute is now writable. This
  |   allows a handler executing in a phase prior to the response phase
  |   to specify which Apache module will be responsible for generating
  |   the content.
  | - (MODPYTHON-128) Made the req.canonical_filename attribute
  |   writable. Changed the req.finfo attribute from being a tuple to
  |   an actual object. For backwards compatibility the attributes of
  |   the object can still be accessed as if they were a tuple. New
  |   code however should access the attributes as member data. The
  |   req.finfo attribute is also now writable and can be assigned to
  |   using the result of calling the new function apache.stat(). This
  |   function is a wrapper for apr_stat().
  | - (MODPYTHON-129) When specifying multiple handlers for a phase,
  |   the status returned by each handler is now treated the same as
  |   how Apache would treat the status if the handler was registered
  |   using the low level C API. What this means is that whereas
  |   stacked handlers of any phase would in turn previously be
  |   executed as long as they returned apache.OK, this is no longer
  |   the case and what happens is dependent on the phase.
  |   Specifically, a handler returning apache.DECLINED no longer
  |   causes the execution of subsequent handlers for the phase to be
  |   skipped. Instead, it will move to the next of the stacked
  |   handlers. In the case of PythonTransHandler, PythonAuthenHandler,
  |   PythonAuthzHandler and PythonTypeHandler, as soon as apache.OK is
  |   returned, subsequent handlers for the phase will be skipped, as
  |   the result indicates that any processing pertinent to that phase
  |   has been completed. For other phases, stacked handlers will
  |   continue to be executed if apache.OK is returned as well as when
  |   apache.DECLINED is returned. This new interpretation of the
  |   status returned also applies to stacked content handlers listed
  |   against the PythonHandler directive even though Apache notionally
  |   only ever calls at most one content handler. Where all stacked
  |   content handlers in that phase run, the status returned from the
  |   last handler becomes the overall status from the content phase.
  | - (MODPYTHON-141) The req.proxyreq and req.uri attributes are now
  |   writable. This allows a handler to setup these values and trigger
  |   proxying of the current request to a remote server.
  | - (MODPYTHON-142) The req.no_cache and req.no_local_copy attributes
  |   are now writable.
  | - (MODPYTHON-143) Completely reimplemented the module importer.
  |   This is now used whenever modules are imported corresponding to
  |   any of the Python*Handler, Python*Filter and PythonImport
  |   directives. The module importer is still able to be used directly
  |   using the apache.import_module() function. The new module
  |   importer no longer supports automatic reloading of
  |   packages/modules that appear on the standard Python module search
  |   path as defined by the PythonPath directive or within an
  |   application by direct changes to sys.path. Automatic module
  |   reloading is however still performed on file based modules (not
  |   packages) which are located within the document tree where
  |   handlers are located.  Locations within the document tree are
  |   however no longer added to the standard Python module search path
  |   automatically as they are maintained within a distinct importer
  |   search path. The PythonPath directive MUST not be used to point
  |   at directories within the document tree. To have additional
  |   directories be searched by the module importer, they should be
  |   listed in the mod_python.importer.path option using the
  |   PythonOption directive. This is a path similar to how PythonPath
  |   argument is supplied, but MUST not reference sys.path nor contain
  |   any directories also listed in the standard Python module search
  |   path. If an application does not appear to work under the module
  |   importer, the old module importer can be reenabled by setting the
  |   mod_python.legacy.importer option using the PythonOption
  |   directive to the value '*'. This option must be set in the global
  |   Apache configuration.
  | - (MODPYTHON-152) When in a sub request, when a request is the
  |   result of an internal redirect, or when when returning from such
  |   a request, the req.main, req.prev and req.next members now
  |   correctly return a reference to the original Python request
  |   object wrapper first created for the specific request_rec
  |   instance rather than creating a new distinct Python request
  |   object. This means that any data added explicitly to a request
  |   object can be passed between such requests.
  | - (MODPYTHON-178) When using mod_python.psp, if the PSP file which
  |   is the target of the request doesn't actually exist, an
  |   apache.HTTP_NOT_FOUND server error is now returned to the client
  |   rather than raising a ValueError exception which results in a 500
  |   internal server error. Note that if using SetHandler and the
  |   request is against the directory and no DirectoryIndex directive
  |   is specified which lists a valid PSP index file, then the same
  |   apache.HTTP_NOT_FOUND server error is returned to the client.
  | - (MODPYTHON-196) For completeness, added req.server.log_error()
  |   and req.connection.log_error(). The latter wraps ap_log_cerror()
  |   (when available), allowing client information to be logged along
  |   with message from a connection handler.
  | - (MODPYTHON-206) The attribute req.used_path_info is now
  |   modifiable and can be set from within handlers. This is
  |   equivalent to having used the AcceptPathInfo directive.
  | - (MODPYTHON-207) The attribute req.args is now modifiable and can
  |   be set from within handlers.
  |
  | Bug Fixes
  | - (MODPYTHON-38) Fixed issue when using PSP pages in conjunction
  |   with publisher handler or where a PSP error page was being
  |   triggered, that form parameters coming from content of a POST
  |   request weren't available or only available using a workaround.
  |   Specifically, the PSP page will now use any FieldStorage object
  |   instance cached as req.form left there by preceding code.
  | - (MODPYTHON-43) Nested __auth__() functions in
  |   mod_python.publisher now execute in context of globals from the
  |   file the function is in and not that of mod_python.publisher
  |   itself.
  | - (MODPYTHON-47) Fixed mod_python.publisher so it will not return a
  |   HTTP Bad Request response when mod_auth is being used to provide
  |   Digest authentication.
  | - (MODPYTHON-63) When handler directives are used within Directory
  |   or DirectoryMatch directives where wildcards or regular
  |   expressions are used, the handler directory will be set to the
  |   shortest directory matched by the directory pattern. Handler
  |   directives can now also be used within Files and FilesMatch
  |   directives and the handler directory will correctly resolve to
  |   the directory corresponding to the enclosing Directory or
  |   DirectoryMatch directive, or the directory the .htaccess file is
  |   contained in.
  | - (MODPYTHON-76) The FilterDispatch callback should not flush the
  |   filter if it has already been closed.
  | - (MODPYTHON-84) The original change to fix the symlink issue for
  |   req.sendfile() was causing problems on Win32, plus code needed to
  |   be changed to work with APR 1.2.7.
  | - (MODPYTHON-100) When using stacked handlers and a SERVER_RETURN
  |   exception was used to return an OK status for that handler, any
  |   following handlers weren't being run if appropriate for the
  |   phase.
  | - (MODPYTHON-109) The Py_Finalize() function was being called on
  |   child process shutdown. This was being done though from within
  |   the context of a signal handler, which is generally unsafe and
  |   would cause the process to lock up. This function is no longer
  |   called on child process shutdown.
  | - (MODPYTHON-112) The req.phase attribute is no longer overwritten
  |   by an input or output filter. The filter.is_input member should
  |   be used to determine if a filter is an input or output filter.
  | - (MODPYTHON-113) The PythonImport directive now uses the
  |   apache.import_module() function to import modules to avoid
  |   reloading problems when same module is imported from a handler.
  | - (MODPYTHON-114) Fixed race conditions on setting sys.path when
  |   the PythonPath directive is being used as well as problems with
  |   infinite extension of path.
  | - (MODPYTHON-120) (MODPYTHON-121) Fixes to test suite so it will
  |   work on virtual hosting environments where localhost doesn't
  |   resolve to 127.0.0.1 but the actual IP address of the host.
  | - (MODPYTHON-126) When Python*Handler or Python*Filter directive is
  |   used inside of a Files directive container, the handler/filter
  |   directory value will now correctly resolve to the directory
  |   corresponding to any parent Directory directive or the location
  |   of the .htaccess file the Files directive is contained in.
  | - (MODPYTHON-133) The table object returned by
  |   req.server.get_config() was not being populated correctly to be
  |   the state of directives set at global scope for the server.
  | - (MODPYTHON-134) Setting PythonDebug to Off, wasn't overriding On
  |   setting in parent scope.
  | - (MODPYTHON-140) The util.redirect() function should be returning
  |   server status of apache.DONE and not apache.OK otherwise it will
  |   not give desired result if used in non content handler phase or
  |   where there are stacked content handlers.
  | - (MODPYTHON-147) Stopped directories being added to sys.path
  |   multiple times when PythonImport and PythonPath directive used.
  | - (MODPYTHON-148) Added missing Apache contants
  |   apache.PROXYREQ_RESPONSE and apache.HTTP_UPGRADE_REQUIRED. Also
  |   added new constants for Apache magic mime types and values for
  |   interpreting the req.connection.keepalive and req.read_body
  |   members.
  | - (MODPYTHON-150) In a multithread MPM, the apache.init() function
  |   could be called more than once for a specific interpreter
  |   instance whereas it should only be called once.
  | - (MODPYTHON-151) Debug error page returned to client when an
  |   exception in a handler occurred wasn't escaping special HTML
  |   characters in the traceback or the details of the exception.
  | - (MODPYTHON-157) Wrong interpreter name used for fixup handler
  |   phase and earlier, when PythonInterpPerDirectory was enabled and
  |   request was against a directory but client didn't provide the
  |   trailing slash.
  | - (MODPYTHON-159) Fix FieldStorage class so that it can handle
  |   multiline headers.
  | - (MODPYTHON-160) Using PythonInterpPerDirective when setting
  |   content handler to run dynamically with req.add_handler() would
  |   cause Apache to crash.
  | - (MODPYTHON-161) Directory argument supplied to req.add_handler()
  |   is canonicalized and a trailing slash added automatically. This
  |   is needed to ensure that the directory is always in POSIX path
  |   style as used by Apache and that convention where directories
  |   associated with directives always have trailing slash is adhered
  |   to. If this is not done, a different interpreter can be chosen to
  |   that expected when the PythonInterpPerDirective is used.
  | - (MODPYTHON-166) PythonHandlerModule was not setting up
  |   registration of the PythonFixupHandler or PythonAuthenHandler.
  |   For the latter this meant that using Require directive with
  |   PythonHandlerModule would cause a 500 error and complaint in
  |   error log about &quot;No groups file&quot;.
  | - (MODPYTHON-167) When PythonDebug was On and and exception
  |   occurred, the response to the client had a status of 200 when it
  |   really should have been a 500 error status indicating that an
  |   internal error occurred. A 500 error status was correctly being
  |   returned when PythonDebug was Off.
  | - (MODPYTHON-168) Fixed psp_parser error when CR is used as a line
  |   terminator in psp code. This may occur with some older editors
  |   such as GoLive on Mac OS X.
  | - (MODPYTHON-175) Fixed problem whereby a main PSP page and an
  |   error page triggered from that page both accessing the session
  |   object would cause a deadlock.
  | - (MODPYTHON-176) Fixed issue whereby PSP code would unlock session
  |   object which it had inherited from the caller meaning caller
  |   could no longer use it safely. PSP code will now only unlock
  |   session if it created it in the first place.
  | - (MODPYTHON-179) Fixed the behaviour of req.readlines() when a
  |   size hint was provided. Previously, it would always return a
  |   single line when a size hint was provided.
  | - (MODPYTHON-180) Publisher would wrongly output a warning about
  |   nothing to publish if req.write() or req.sendfile() used and data
  |   not flushed, and then published function returned None.
  | - (MODPYTHON-181) Fixed memory leak when mod_python handlers are
  |   defined for more than one phase at the same time.
  | - (MODPYTHON-182) Fixed memory leak in req.readline().
  | - (MODPYTHON-184) Fix memory leak in apache.make_table(). This was
  |   used by util.FieldStorage class so affected all code using forms.
  | - (MODPYTHON-185) Fixed segfault in psp.parsestring(src_string)
  |   when src_string is empty.
  | - (MODPYTHON-187) Table objects could crash in various ways when
  |   the value of an item was NULL. This could occur for
  |   SCRIPT_FILENAME when the req.subprocess_env table was accessed in
  |   the post read request handler phase.
  | - (MODPYTHON-189) Fixed representation returned by calling repr()
  |   on a table object.
  | - (MODPYTHON-191) Session class will no longer accept a normal
  |   cookie if a signed cookie was expected.
  | - (MODPYTHON-194) Fixed potential memory leak due to not clearing
  |   the state of thread state objects before deleting them.
  | - (MODPYTHON-195) Fix potential Win32 resource leaks in parent
  |   Apache process when process restarts occur.
  | - (MODPYTHON-198) Python 2.5 broke nested
  |   __auth__/__access__/__auth_realm__ in mod_python.publisher.
  | - (MODPYTHON-200) Fixed problem whereby signed and marshalled
  |   cookies could not be used at the same time. When expecting
  |   marshalled cookie, any signed, but not marshalled cookies will be
  |   returned as normal cookies.</changelog>
<changelog author="poeml@suse.de" date="1161604800">- simplify last fix, so it still builds with python &lt; 2.5.</changelog>
<changelog author="aj@suse.de" date="1159012800">- Fix build with python 2.5.</changelog>
<changelog author="poeml@suse.de" date="1155902400">- update to 3.2.10
  |- New Features
  |  - (MODPYTHON-78) Added support for Apache 2.2.
  |  - (MODPYTHON-94) New req.is_https() and req.ssl_var_lookup()
  |    methods. These communicate direct with the Apache mod_ssl
  |    module, allowing it to be determined if the connection is
  |    using SSL/TLS and what the values of internal ssl variables
  |    are.
  |  - (MODPYTHON-137) New req.server.get_options() method. This
  |    returns the subset of Python options set at global scope
  |    within the Apache configuration. That is, outside of the
  |    context of any VirtualHost, Location, Directory or Files
  |    directives.
  |  - (MODPYTHON-131) The directory used for mutex locks can now be
  |    specified at at compile time using ./configure
  |    --with-mutex-dir value or at run time with PythonOption
  |    mod_python.mutex_directory value.
  |  - (MODPYTHON-145) The number of mutex locks can now be
  |    specified at run time with PythonOption
  |    mod_python.mutex_locks value.
  |  - (MODPYTHON-172) Fixed three memory leaks that were found in
  |    _apachemodule.parse_qsl, req.readlines and util.cfgtree_walk.
  |- Improvements
  |  - (MODPYTHON-77) Third party C modules that use the simplified
  |    API for the Global Interpreter Lock (GIL), as described in
  |    PEP 311, can now be used. The only requirement is that such
  |    modules can only be used in the context of the
  |    &quot;main_interpreter&quot;.
  |  - (MODPYTHON-119) DbmSession unit test no longer uses the
  |    default directory for the dbm file, so the test will not
  |    interfer with the user's current apache instance.
  |  - (MODPYTHON-158) Added additional debugging and logging output
  |    for where mod_python cannot initialise itself properly due to
  |    Python or mod_python version mismatches or missing Python
  |    module code files.
  |- Bug Fixes
  |  - (MODPYTHON-122) Fixed configure problem when using bash 3.1.x.
  |  - (MODPYTHON-173) Fixed DbmSession to create db file with mode 0640.
  |  - (MODPYTHON-84) Fixed request.sendfile() bug for symlinked
  |    files on Win32.
- drop obsolete patches</changelog>
<changelog author="poeml@suse.de" date="1155902400">- update to 3.2.8
  |- New Features:
  |  - New apache.register_cleanup() method.
  |  - New apache.exists_config_define() method.
  |  - New file-based session manager class.
  |  - Session cookie name can be specified.
  |  - The maximum number of mutexes mod_python uses for session
  |    locking can now be specifed at compile time using configure
  |    --with-max-locks.
  |  - New a version attribute in mod_python module.
  |  - New test handler testhandler.py has been added.
  |- Improvements
  |  - Autoreload of a module using apache.import_module() now works
  |    if modification time for the module is different from the
  |    file.  Previously, the module was only reloaded if the the
  |    modification time of the file was more recent. This allows
  |    for a more graceful reload if a file with an older
  |    modification time needs to be restored from backup.
  |  - Fixed the publisher traversal security issue
  |  - Objects hierarchy a la CherryPy can now be published.
  |  - mod_python.c now logs reason for a 500 error
  |  - Calls to PyErr_Print in mod_python.c are now followed by
  |    fflush()
  |  - Using an empty value with PythonOption will unset a
  |    PythonOption key.
  |  - req.path_info is now a read/write member.
  |  - Improvements to FieldStorage allow uploading of large files.
  |    Uploaded files are now streamed to disk, not to memory.
  |  - Path to flex is now discovered at configuration time or can
  |    be specifed using configure --with-flex=/path/to/flex.
  |  - sys.argv is now initialized to [&quot;mod_python&quot;] so that modules
  |    like numarray and pychart can work properly.
  |- Bug Fixes
  |  - Fixed memory leak which resulted from circular references
  |    starting from the request object.
  |  - Fixed memory leak resulting from multiple PythonOption
  |    directives.
  |  - Fixed Multiple/redundant interpreter creation problem.
  |  - Cookie attributes with attribute names prefixed with $ are
  |    now ignored. See Section 4.7 for more information.
  |  - Bug in setting up of config_dir from Handler directives
  |    fixed.
  |  - mod_python.publisher will now support modules with the same
  |    name but in different directories
  |  - Fixed continual reloading of modules problem
  |  - Fixed big marshalled cookies error.
  |  - Fixed mod_python.publisher extension handling
  |  - mod_python.publisher default index file traversal
  |  - mod_python.publisher loading wrong module and giving no
  |    warning/error
  |  - apply_fs_data() now works with &quot;new style&quot; objects
  |  - File descriptor fd closed after ap_send_fd() in
  |    req_sendfile()
  |  - Bug in mem_cleanup in MemorySession fixed.
  |  - Fixed bug in _apache._global_lock() which could cause a
  |    segfault if the lock index parameter is greater number of
  |    mutexes created at mod_python startup.
  |  - Fixed bug where local_ip and local_host in connection object
  |    were returning remote_ip and remote_host instead
  |  - Fixed install_dso Makefile rule so it only installs the dso,
  |    not the python files
  |  - Potential deadlock in psp cache handling fixed
  |  - Fixed bug where sessions are used outside &lt;Directory&gt;
  |    directive.
  |  - Fixed compile problem on IRIX. ln -s requires both TARGET and
  |    LINK_NAME on IRIX. ie. ln -s TARGET LINK_NAME
  |  - Fixed ./configure problem on SuSE Linux 9.2 (x86-64). Python
  |    libraries are in lib64/ for this platform.
  |  - Fixed req.sendfile() problem where sendfile(filename) sends
  |    the incorrect number of bytes when filename is a symlink.
  |  - Fixed problem where util.FieldStorage was not correctly
  |    checking the mime types of POSTed entities
  |  - Fixed conn.local_addr and conn.remote_addr for a better IPv6
  |    support.
  |  - Fixed psp_parser.l to properly escape backslash-n,
  |    backslash-t and backslash-r character sequences.
  |  - Fixed segfault bug when accessing some request object members
  |    (allowed_methods, allowed_xmethods, content_languages) and
  |    some server object members (names, wild_names).
  |  - Fixed request.add_handler() segfault bug when adding a
  |    handler to an empty handler list.
  |  - Fixed PythonAutoReload directive so that AutoReload can be
  |    turned off.
  |  - Fixed connection object read() bug on FreeBSD.
  |  - Fixed potential buffer corruption bug in connection object
  |    read().
- remove references to obsolete APR_STATUS_IS_SUCCESS and
  apr_sockaddr_port_get() for libapr-1.2.7
- drop obsolete mod_python-3.1.3-publisher.dif
- fix installation into the correct libdir, it didn't work anymore</changelog>
<changelog author="aj@suse.de" date="1141473600">- updated to reflect python changes due to #149809</changelog>
</package>
<package pkgid="13e909347fc749d1b0d3d514a419b5d4e3206a72" name="apache2-mod_python" arch="src">
<version epoch="0" ver="3.3.1" rel="161.3.1"/>
<changelog author="draht@suse.de" date="1298980800">- apache2-mod_python-bnc675927.patch fixes bnc#675927:
  python segfaults on openSUSE 11.4 when used with mod_python</changelog>
<changelog author="opensuse@dstoecker.de" date="1273147200">- fix md5 deprecation warning</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242734400">- spec file cosmetic fixes
- pass -j
- use in-place sed (sed -i)
- added hacks for building with python2.5 on SLE 9</changelog>
<changelog author="poeml@suse.de" date="1219147200">- fix build with apr 1.3.2 and later
  mod_python-3.3.1-bucket-brigade.patch
  http://www.mail-archive.com/dev@apr.apache.org/msg20588.html</changelog>
<changelog author="poeml@suse.de" date="1176465600">- update to 3.3.1
  | New Features
  | - (MODPYTHON-103) New req.add_output_filter(),
  |   req.add_input_filter(), req.register_output_fiter(),
  |   req.register_input_filter() methods. These allows the dynamic
  |   registration of filters and the attaching of filters to the
  |   current request.
  | - (MODPYTHON-104) Support added for using Python in content being
  |   passed through &quot;INCLUDES&quot; output filter, or as more commonly
  |   referred to server side include (SSI) mechanism.
  | - (MODPYTHON-108) Added support to cookies for httponly attribute,
  |   an extension originally created by Microsoft, but now getting
  |   more widespread use in the battle against cross site-scripting
  |   attacks.
  | - (MODPYTHON-118) Now possible using the PythonImport directive to
  |   specify the name of a function contained in the module to be
  |   called once the designated module has been imported.
  | - (MODPYTHON-124) New req.auth_name() and req.auth_type() methods.
  |   These return the values associated with the AuthName and AuthType
  |   directives respectively. The req.ap_auth_type has now also been
  |   made writable so that it can be set by an authentication handler.
  | - (MODPYTHON-130) Added req.set_etag(), req.set_last_modified() and
  |   req.update_mtime() functions as wrappers for similar functions
  |   provided by Apache C API. These are required to effectively use
  |   the req.meets_condition() function.  The documentation for
  |   req.meets_condition() has also been updated as what it previously
  |   described probably wouldn't actually work.
  | - (MODPYTHON-132) New req.construct_url() method. Used to construct
  |   a fully qualified URI string incorporating correct scheme, server
  |   and port.
  | - (MODPYTHON-144) The &quot;apache.interpreter&quot; and &quot;apache.main_server&quot;
  |   attributes have been made publically available. These were
  |   previously private and not part of the public API.
  | - (MODPYTHON-149) Added support for session objects that span
  |   domains.
  | - (MODPYTHON-153) Added req.discard_request_body() function as
  |   wrapper for similar function provided by Apache C API. The
  |   function tests for and reads any message body in the request,
  |   simply discarding whatever it receives.
  | - (MODPYTHON-164) The req.add_handler(),
  |   req.register_input_filter() and req.register_output_filter()
  |   methods can now take a direct reference to a callable object as
  |   well a string which refers to a module or module::function
  |   combination by name.
  | - (MODPYTHON-165) Exported functions from mod_python module to be
  |   used in other third party modules for Apache. The purpose of
  |   these functions is to allow those other modules to access the
  |   mechanics of how mod_python creates interpreters, thereby
  |   allowing other modules to also embed Python and for there not to
  |   be a conflict with mod_python.
  | - (MODPYTHON-170) Added req._request_rec, server._server_rec and
  |   conn._conn_rec semi private members for getting accessing to
  |   underlying Apache struct as a Python CObject. These can be used
  |   for use in implementing SWIG bindings for lower level APIs of
  |   Apache. These members should be regarded as experimental and
  |   there are no guarantees that they will remain present in this
  |   specific form in the future.
  | - (MODPYTHON-193) Added new attribute available as
  |   req.hlist.location. For a handler executed directly as the result
  |   of a handler directive within a Location directive, this will be
  |   set to the value of the Location directive. If LocationMatch, or
  |   wildcards or regular expressions are used with Location, the
  |   value will be the matched value in the URL and not the pattern.
  |
  | Improvements
  | - (MODPYTHON-27) When using mod_python.publisher, the __auth__()
  |   and __access__() functions and the __auth_realm__ string can now
  |   be nested within a class method as a well a normal function.
  | - (MODPYTHON-90) The PythonEnablePdb configuration option will now
  |   be ignored if Apache hasn't been started up in single process
  |   mode.
  | - (MODPYTHON-91) If running Apache in single process mode with PDB
  |   enabled and the &quot;quit&quot; command is used to exit that debug
  |   session, an exception indicating that the PDB session has been
  |   aborted is raised rather than None being returned with a
  |   subsequent error complaining about the handler returning an
  |   invalid value.
  | - (MODPYTHON-93) Improved util.FieldStorage efficiency and made the
  |   interface more dictionary like.
  | - (MODPYTHON-101) Force an exception when handler evaluates to
  |   something other than None but is otherwise not callable.
  |   Previously an exception would not be generated if the handler
  |   evaluated to False.
  | - (MODPYTHON-107) Neither mod_python.publisher nor mod_python.psp
  |   explicitly flush output after writing the content of the response
  |   back to the request object. By not flushing output it is now
  |   possible to use the &quot;CONTENT_LENGTH&quot; output filter to add a
  |   &quot;Content-Length&quot; header.
  | - (MODPYTHON-111) Note made in session documentation that a save is
  |   required to avoid session timeouts.
  | - (MODPYTHON-125) The req.handler attribute is now writable. This
  |   allows a handler executing in a phase prior to the response phase
  |   to specify which Apache module will be responsible for generating
  |   the content.
  | - (MODPYTHON-128) Made the req.canonical_filename attribute
  |   writable. Changed the req.finfo attribute from being a tuple to
  |   an actual object. For backwards compatibility the attributes of
  |   the object can still be accessed as if they were a tuple. New
  |   code however should access the attributes as member data. The
  |   req.finfo attribute is also now writable and can be assigned to
  |   using the result of calling the new function apache.stat(). This
  |   function is a wrapper for apr_stat().
  | - (MODPYTHON-129) When specifying multiple handlers for a phase,
  |   the status returned by each handler is now treated the same as
  |   how Apache would treat the status if the handler was registered
  |   using the low level C API. What this means is that whereas
  |   stacked handlers of any phase would in turn previously be
  |   executed as long as they returned apache.OK, this is no longer
  |   the case and what happens is dependent on the phase.
  |   Specifically, a handler returning apache.DECLINED no longer
  |   causes the execution of subsequent handlers for the phase to be
  |   skipped. Instead, it will move to the next of the stacked
  |   handlers. In the case of PythonTransHandler, PythonAuthenHandler,
  |   PythonAuthzHandler and PythonTypeHandler, as soon as apache.OK is
  |   returned, subsequent handlers for the phase will be skipped, as
  |   the result indicates that any processing pertinent to that phase
  |   has been completed. For other phases, stacked handlers will
  |   continue to be executed if apache.OK is returned as well as when
  |   apache.DECLINED is returned. This new interpretation of the
  |   status returned also applies to stacked content handlers listed
  |   against the PythonHandler directive even though Apache notionally
  |   only ever calls at most one content handler. Where all stacked
  |   content handlers in that phase run, the status returned from the
  |   last handler becomes the overall status from the content phase.
  | - (MODPYTHON-141) The req.proxyreq and req.uri attributes are now
  |   writable. This allows a handler to setup these values and trigger
  |   proxying of the current request to a remote server.
  | - (MODPYTHON-142) The req.no_cache and req.no_local_copy attributes
  |   are now writable.
  | - (MODPYTHON-143) Completely reimplemented the module importer.
  |   This is now used whenever modules are imported corresponding to
  |   any of the Python*Handler, Python*Filter and PythonImport
  |   directives. The module importer is still able to be used directly
  |   using the apache.import_module() function. The new module
  |   importer no longer supports automatic reloading of
  |   packages/modules that appear on the standard Python module search
  |   path as defined by the PythonPath directive or within an
  |   application by direct changes to sys.path. Automatic module
  |   reloading is however still performed on file based modules (not
  |   packages) which are located within the document tree where
  |   handlers are located.  Locations within the document tree are
  |   however no longer added to the standard Python module search path
  |   automatically as they are maintained within a distinct importer
  |   search path. The PythonPath directive MUST not be used to point
  |   at directories within the document tree. To have additional
  |   directories be searched by the module importer, they should be
  |   listed in the mod_python.importer.path option using the
  |   PythonOption directive. This is a path similar to how PythonPath
  |   argument is supplied, but MUST not reference sys.path nor contain
  |   any directories also listed in the standard Python module search
  |   path. If an application does not appear to work under the module
  |   importer, the old module importer can be reenabled by setting the
  |   mod_python.legacy.importer option using the PythonOption
  |   directive to the value '*'. This option must be set in the global
  |   Apache configuration.
  | - (MODPYTHON-152) When in a sub request, when a request is the
  |   result of an internal redirect, or when when returning from such
  |   a request, the req.main, req.prev and req.next members now
  |   correctly return a reference to the original Python request
  |   object wrapper first created for the specific request_rec
  |   instance rather than creating a new distinct Python request
  |   object. This means that any data added explicitly to a request
  |   object can be passed between such requests.
  | - (MODPYTHON-178) When using mod_python.psp, if the PSP file which
  |   is the target of the request doesn't actually exist, an
  |   apache.HTTP_NOT_FOUND server error is now returned to the client
  |   rather than raising a ValueError exception which results in a 500
  |   internal server error. Note that if using SetHandler and the
  |   request is against the directory and no DirectoryIndex directive
  |   is specified which lists a valid PSP index file, then the same
  |   apache.HTTP_NOT_FOUND server error is returned to the client.
  | - (MODPYTHON-196) For completeness, added req.server.log_error()
  |   and req.connection.log_error(). The latter wraps ap_log_cerror()
  |   (when available), allowing client information to be logged along
  |   with message from a connection handler.
  | - (MODPYTHON-206) The attribute req.used_path_info is now
  |   modifiable and can be set from within handlers. This is
  |   equivalent to having used the AcceptPathInfo directive.
  | - (MODPYTHON-207) The attribute req.args is now modifiable and can
  |   be set from within handlers.
  |
  | Bug Fixes
  | - (MODPYTHON-38) Fixed issue when using PSP pages in conjunction
  |   with publisher handler or where a PSP error page was being
  |   triggered, that form parameters coming from content of a POST
  |   request weren't available or only available using a workaround.
  |   Specifically, the PSP page will now use any FieldStorage object
  |   instance cached as req.form left there by preceding code.
  | - (MODPYTHON-43) Nested __auth__() functions in
  |   mod_python.publisher now execute in context of globals from the
  |   file the function is in and not that of mod_python.publisher
  |   itself.
  | - (MODPYTHON-47) Fixed mod_python.publisher so it will not return a
  |   HTTP Bad Request response when mod_auth is being used to provide
  |   Digest authentication.
  | - (MODPYTHON-63) When handler directives are used within Directory
  |   or DirectoryMatch directives where wildcards or regular
  |   expressions are used, the handler directory will be set to the
  |   shortest directory matched by the directory pattern. Handler
  |   directives can now also be used within Files and FilesMatch
  |   directives and the handler directory will correctly resolve to
  |   the directory corresponding to the enclosing Directory or
  |   DirectoryMatch directive, or the directory the .htaccess file is
  |   contained in.
  | - (MODPYTHON-76) The FilterDispatch callback should not flush the
  |   filter if it has already been closed.
  | - (MODPYTHON-84) The original change to fix the symlink issue for
  |   req.sendfile() was causing problems on Win32, plus code needed to
  |   be changed to work with APR 1.2.7.
  | - (MODPYTHON-100) When using stacked handlers and a SERVER_RETURN
  |   exception was used to return an OK status for that handler, any
  |   following handlers weren't being run if appropriate for the
  |   phase.
  | - (MODPYTHON-109) The Py_Finalize() function was being called on
  |   child process shutdown. This was being done though from within
  |   the context of a signal handler, which is generally unsafe and
  |   would cause the process to lock up. This function is no longer
  |   called on child process shutdown.
  | - (MODPYTHON-112) The req.phase attribute is no longer overwritten
  |   by an input or output filter. The filter.is_input member should
  |   be used to determine if a filter is an input or output filter.
  | - (MODPYTHON-113) The PythonImport directive now uses the
  |   apache.import_module() function to import modules to avoid
  |   reloading problems when same module is imported from a handler.
  | - (MODPYTHON-114) Fixed race conditions on setting sys.path when
  |   the PythonPath directive is being used as well as problems with
  |   infinite extension of path.
  | - (MODPYTHON-120) (MODPYTHON-121) Fixes to test suite so it will
  |   work on virtual hosting environments where localhost doesn't
  |   resolve to 127.0.0.1 but the actual IP address of the host.
  | - (MODPYTHON-126) When Python*Handler or Python*Filter directive is
  |   used inside of a Files directive container, the handler/filter
  |   directory value will now correctly resolve to the directory
  |   corresponding to any parent Directory directive or the location
  |   of the .htaccess file the Files directive is contained in.
  | - (MODPYTHON-133) The table object returned by
  |   req.server.get_config() was not being populated correctly to be
  |   the state of directives set at global scope for the server.
  | - (MODPYTHON-134) Setting PythonDebug to Off, wasn't overriding On
  |   setting in parent scope.
  | - (MODPYTHON-140) The util.redirect() function should be returning
  |   server status of apache.DONE and not apache.OK otherwise it will
  |   not give desired result if used in non content handler phase or
  |   where there are stacked content handlers.
  | - (MODPYTHON-147) Stopped directories being added to sys.path
  |   multiple times when PythonImport and PythonPath directive used.
  | - (MODPYTHON-148) Added missing Apache contants
  |   apache.PROXYREQ_RESPONSE and apache.HTTP_UPGRADE_REQUIRED. Also
  |   added new constants for Apache magic mime types and values for
  |   interpreting the req.connection.keepalive and req.read_body
  |   members.
  | - (MODPYTHON-150) In a multithread MPM, the apache.init() function
  |   could be called more than once for a specific interpreter
  |   instance whereas it should only be called once.
  | - (MODPYTHON-151) Debug error page returned to client when an
  |   exception in a handler occurred wasn't escaping special HTML
  |   characters in the traceback or the details of the exception.
  | - (MODPYTHON-157) Wrong interpreter name used for fixup handler
  |   phase and earlier, when PythonInterpPerDirectory was enabled and
  |   request was against a directory but client didn't provide the
  |   trailing slash.
  | - (MODPYTHON-159) Fix FieldStorage class so that it can handle
  |   multiline headers.
  | - (MODPYTHON-160) Using PythonInterpPerDirective when setting
  |   content handler to run dynamically with req.add_handler() would
  |   cause Apache to crash.
  | - (MODPYTHON-161) Directory argument supplied to req.add_handler()
  |   is canonicalized and a trailing slash added automatically. This
  |   is needed to ensure that the directory is always in POSIX path
  |   style as used by Apache and that convention where directories
  |   associated with directives always have trailing slash is adhered
  |   to. If this is not done, a different interpreter can be chosen to
  |   that expected when the PythonInterpPerDirective is used.
  | - (MODPYTHON-166) PythonHandlerModule was not setting up
  |   registration of the PythonFixupHandler or PythonAuthenHandler.
  |   For the latter this meant that using Require directive with
  |   PythonHandlerModule would cause a 500 error and complaint in
  |   error log about &quot;No groups file&quot;.
  | - (MODPYTHON-167) When PythonDebug was On and and exception
  |   occurred, the response to the client had a status of 200 when it
  |   really should have been a 500 error status indicating that an
  |   internal error occurred. A 500 error status was correctly being
  |   returned when PythonDebug was Off.
  | - (MODPYTHON-168) Fixed psp_parser error when CR is used as a line
  |   terminator in psp code. This may occur with some older editors
  |   such as GoLive on Mac OS X.
  | - (MODPYTHON-175) Fixed problem whereby a main PSP page and an
  |   error page triggered from that page both accessing the session
  |   object would cause a deadlock.
  | - (MODPYTHON-176) Fixed issue whereby PSP code would unlock session
  |   object which it had inherited from the caller meaning caller
  |   could no longer use it safely. PSP code will now only unlock
  |   session if it created it in the first place.
  | - (MODPYTHON-179) Fixed the behaviour of req.readlines() when a
  |   size hint was provided. Previously, it would always return a
  |   single line when a size hint was provided.
  | - (MODPYTHON-180) Publisher would wrongly output a warning about
  |   nothing to publish if req.write() or req.sendfile() used and data
  |   not flushed, and then published function returned None.
  | - (MODPYTHON-181) Fixed memory leak when mod_python handlers are
  |   defined for more than one phase at the same time.
  | - (MODPYTHON-182) Fixed memory leak in req.readline().
  | - (MODPYTHON-184) Fix memory leak in apache.make_table(). This was
  |   used by util.FieldStorage class so affected all code using forms.
  | - (MODPYTHON-185) Fixed segfault in psp.parsestring(src_string)
  |   when src_string is empty.
  | - (MODPYTHON-187) Table objects could crash in various ways when
  |   the value of an item was NULL. This could occur for
  |   SCRIPT_FILENAME when the req.subprocess_env table was accessed in
  |   the post read request handler phase.
  | - (MODPYTHON-189) Fixed representation returned by calling repr()
  |   on a table object.
  | - (MODPYTHON-191) Session class will no longer accept a normal
  |   cookie if a signed cookie was expected.
  | - (MODPYTHON-194) Fixed potential memory leak due to not clearing
  |   the state of thread state objects before deleting them.
  | - (MODPYTHON-195) Fix potential Win32 resource leaks in parent
  |   Apache process when process restarts occur.
  | - (MODPYTHON-198) Python 2.5 broke nested
  |   __auth__/__access__/__auth_realm__ in mod_python.publisher.
  | - (MODPYTHON-200) Fixed problem whereby signed and marshalled
  |   cookies could not be used at the same time. When expecting
  |   marshalled cookie, any signed, but not marshalled cookies will be
  |   returned as normal cookies.</changelog>
<changelog author="poeml@suse.de" date="1161604800">- simplify last fix, so it still builds with python &lt; 2.5.</changelog>
<changelog author="aj@suse.de" date="1159012800">- Fix build with python 2.5.</changelog>
<changelog author="poeml@suse.de" date="1155902400">- update to 3.2.10
  |- New Features
  |  - (MODPYTHON-78) Added support for Apache 2.2.
  |  - (MODPYTHON-94) New req.is_https() and req.ssl_var_lookup()
  |    methods. These communicate direct with the Apache mod_ssl
  |    module, allowing it to be determined if the connection is
  |    using SSL/TLS and what the values of internal ssl variables
  |    are.
  |  - (MODPYTHON-137) New req.server.get_options() method. This
  |    returns the subset of Python options set at global scope
  |    within the Apache configuration. That is, outside of the
  |    context of any VirtualHost, Location, Directory or Files
  |    directives.
  |  - (MODPYTHON-131) The directory used for mutex locks can now be
  |    specified at at compile time using ./configure
  |    --with-mutex-dir value or at run time with PythonOption
  |    mod_python.mutex_directory value.
  |  - (MODPYTHON-145) The number of mutex locks can now be
  |    specified at run time with PythonOption
  |    mod_python.mutex_locks value.
  |  - (MODPYTHON-172) Fixed three memory leaks that were found in
  |    _apachemodule.parse_qsl, req.readlines and util.cfgtree_walk.
  |- Improvements
  |  - (MODPYTHON-77) Third party C modules that use the simplified
  |    API for the Global Interpreter Lock (GIL), as described in
  |    PEP 311, can now be used. The only requirement is that such
  |    modules can only be used in the context of the
  |    &quot;main_interpreter&quot;.
  |  - (MODPYTHON-119) DbmSession unit test no longer uses the
  |    default directory for the dbm file, so the test will not
  |    interfer with the user's current apache instance.
  |  - (MODPYTHON-158) Added additional debugging and logging output
  |    for where mod_python cannot initialise itself properly due to
  |    Python or mod_python version mismatches or missing Python
  |    module code files.
  |- Bug Fixes
  |  - (MODPYTHON-122) Fixed configure problem when using bash 3.1.x.
  |  - (MODPYTHON-173) Fixed DbmSession to create db file with mode 0640.
  |  - (MODPYTHON-84) Fixed request.sendfile() bug for symlinked
  |    files on Win32.
- drop obsolete patches</changelog>
<changelog author="poeml@suse.de" date="1155902400">- update to 3.2.8
  |- New Features:
  |  - New apache.register_cleanup() method.
  |  - New apache.exists_config_define() method.
  |  - New file-based session manager class.
  |  - Session cookie name can be specified.
  |  - The maximum number of mutexes mod_python uses for session
  |    locking can now be specifed at compile time using configure
  |    --with-max-locks.
  |  - New a version attribute in mod_python module.
  |  - New test handler testhandler.py has been added.
  |- Improvements
  |  - Autoreload of a module using apache.import_module() now works
  |    if modification time for the module is different from the
  |    file.  Previously, the module was only reloaded if the the
  |    modification time of the file was more recent. This allows
  |    for a more graceful reload if a file with an older
  |    modification time needs to be restored from backup.
  |  - Fixed the publisher traversal security issue
  |  - Objects hierarchy a la CherryPy can now be published.
  |  - mod_python.c now logs reason for a 500 error
  |  - Calls to PyErr_Print in mod_python.c are now followed by
  |    fflush()
  |  - Using an empty value with PythonOption will unset a
  |    PythonOption key.
  |  - req.path_info is now a read/write member.
  |  - Improvements to FieldStorage allow uploading of large files.
  |    Uploaded files are now streamed to disk, not to memory.
  |  - Path to flex is now discovered at configuration time or can
  |    be specifed using configure --with-flex=/path/to/flex.
  |  - sys.argv is now initialized to [&quot;mod_python&quot;] so that modules
  |    like numarray and pychart can work properly.
  |- Bug Fixes
  |  - Fixed memory leak which resulted from circular references
  |    starting from the request object.
  |  - Fixed memory leak resulting from multiple PythonOption
  |    directives.
  |  - Fixed Multiple/redundant interpreter creation problem.
  |  - Cookie attributes with attribute names prefixed with $ are
  |    now ignored. See Section 4.7 for more information.
  |  - Bug in setting up of config_dir from Handler directives
  |    fixed.
  |  - mod_python.publisher will now support modules with the same
  |    name but in different directories
  |  - Fixed continual reloading of modules problem
  |  - Fixed big marshalled cookies error.
  |  - Fixed mod_python.publisher extension handling
  |  - mod_python.publisher default index file traversal
  |  - mod_python.publisher loading wrong module and giving no
  |    warning/error
  |  - apply_fs_data() now works with &quot;new style&quot; objects
  |  - File descriptor fd closed after ap_send_fd() in
  |    req_sendfile()
  |  - Bug in mem_cleanup in MemorySession fixed.
  |  - Fixed bug in _apache._global_lock() which could cause a
  |    segfault if the lock index parameter is greater number of
  |    mutexes created at mod_python startup.
  |  - Fixed bug where local_ip and local_host in connection object
  |    were returning remote_ip and remote_host instead
  |  - Fixed install_dso Makefile rule so it only installs the dso,
  |    not the python files
  |  - Potential deadlock in psp cache handling fixed
  |  - Fixed bug where sessions are used outside &lt;Directory&gt;
  |    directive.
  |  - Fixed compile problem on IRIX. ln -s requires both TARGET and
  |    LINK_NAME on IRIX. ie. ln -s TARGET LINK_NAME
  |  - Fixed ./configure problem on SuSE Linux 9.2 (x86-64). Python
  |    libraries are in lib64/ for this platform.
  |  - Fixed req.sendfile() problem where sendfile(filename) sends
  |    the incorrect number of bytes when filename is a symlink.
  |  - Fixed problem where util.FieldStorage was not correctly
  |    checking the mime types of POSTed entities
  |  - Fixed conn.local_addr and conn.remote_addr for a better IPv6
  |    support.
  |  - Fixed psp_parser.l to properly escape backslash-n,
  |    backslash-t and backslash-r character sequences.
  |  - Fixed segfault bug when accessing some request object members
  |    (allowed_methods, allowed_xmethods, content_languages) and
  |    some server object members (names, wild_names).
  |  - Fixed request.add_handler() segfault bug when adding a
  |    handler to an empty handler list.
  |  - Fixed PythonAutoReload directive so that AutoReload can be
  |    turned off.
  |  - Fixed connection object read() bug on FreeBSD.
  |  - Fixed potential buffer corruption bug in connection object
  |    read().
- remove references to obsolete APR_STATUS_IS_SUCCESS and
  apr_sockaddr_port_get() for libapr-1.2.7
- drop obsolete mod_python-3.1.3-publisher.dif
- fix installation into the correct libdir, it didn't work anymore</changelog>
<changelog author="aj@suse.de" date="1141473600">- updated to reflect python changes due to #149809</changelog>
<changelog author="poeml@suse.de" date="1138622400">- removed libapr-util1-devel from BuildRequires (apache2-devel does
  require it)</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1135166400">- fix quoting problem in configure.in</changelog>
<changelog author="poeml@suse.de" date="1134043200">- if building with apache 2.2, remove references to
  obsolete APR_STATUS_IS_SUCCESS</changelog>
<changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
<changelog author="poeml@suse.de" date="1108123200">- fix CAN-2005-0088 patch [#50324]</changelog>
<changelog author="poeml@suse.de" date="1107259200">- fix information leak in publisher handler, CAN-2005-0088 [#50324]</changelog>
<changelog author="poeml@suse.de" date="1106654400">- move usage hints from %post into package description</changelog>
<changelog author="mcihar@suse.de" date="1101297600">- use %{py_sitedir}</changelog>
<changelog author="poeml@suse.de" date="1078488000">- update to 3.1.3
- package is now licensed under Apache Software License 2.0</changelog>
<changelog author="poeml@suse.de" date="1076414400">- update to 3.0.4, which fixes a vulnerability whereby a specific
  query string processed by mod_python would cause the httpd rocess
  to crash.
- mod_python-3.0.3-python-2.3b1.dif is no longer needed</changelog>
<changelog author="mcihar@suse.cz" date="1062158400">- require same python version as it was built with</changelog>
<changelog author="poeml@suse.de" date="1062158400">- Conflicts: mod_python (the Apache 1 module) [#29637]</changelog>
<changelog author="poeml@suse.de" date="1059393600">- don't explicitely strip binaries since RPM handles it, and may
  keep the stripped information somewhere
- fix mentioned path to documentation</changelog>
<changelog author="poeml@suse.de" date="1054900800">- install missing .py files into python's site-packages folder
- fix installation on 64 bit architecture (lib64)</changelog>
<changelog author="poeml@suse.de" date="1054296000">- new package
- in python-2.3b1, LONG_LONG is renamed to PY_LONG_LONG</changelog>
</package>
<package pkgid="18b59d30509c4aa3a9b0e956d28d4238a37896e4" name="apache2-mod_python" arch="i586">
<version epoch="0" ver="3.3.1" rel="161.3.1"/>
<changelog author="draht@suse.de" date="1298980800">- apache2-mod_python-bnc675927.patch fixes bnc#675927:
  python segfaults on openSUSE 11.4 when used with mod_python</changelog>
<changelog author="opensuse@dstoecker.de" date="1273147200">- fix md5 deprecation warning</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242734400">- spec file cosmetic fixes
- pass -j
- use in-place sed (sed -i)
- added hacks for building with python2.5 on SLE 9</changelog>
<changelog author="poeml@suse.de" date="1219147200">- fix build with apr 1.3.2 and later
  mod_python-3.3.1-bucket-brigade.patch
  http://www.mail-archive.com/dev@apr.apache.org/msg20588.html</changelog>
<changelog author="poeml@suse.de" date="1176465600">- update to 3.3.1
  | New Features
  | - (MODPYTHON-103) New req.add_output_filter(),
  |   req.add_input_filter(), req.register_output_fiter(),
  |   req.register_input_filter() methods. These allows the dynamic
  |   registration of filters and the attaching of filters to the
  |   current request.
  | - (MODPYTHON-104) Support added for using Python in content being
  |   passed through &quot;INCLUDES&quot; output filter, or as more commonly
  |   referred to server side include (SSI) mechanism.
  | - (MODPYTHON-108) Added support to cookies for httponly attribute,
  |   an extension originally created by Microsoft, but now getting
  |   more widespread use in the battle against cross site-scripting
  |   attacks.
  | - (MODPYTHON-118) Now possible using the PythonImport directive to
  |   specify the name of a function contained in the module to be
  |   called once the designated module has been imported.
  | - (MODPYTHON-124) New req.auth_name() and req.auth_type() methods.
  |   These return the values associated with the AuthName and AuthType
  |   directives respectively. The req.ap_auth_type has now also been
  |   made writable so that it can be set by an authentication handler.
  | - (MODPYTHON-130) Added req.set_etag(), req.set_last_modified() and
  |   req.update_mtime() functions as wrappers for similar functions
  |   provided by Apache C API. These are required to effectively use
  |   the req.meets_condition() function.  The documentation for
  |   req.meets_condition() has also been updated as what it previously
  |   described probably wouldn't actually work.
  | - (MODPYTHON-132) New req.construct_url() method. Used to construct
  |   a fully qualified URI string incorporating correct scheme, server
  |   and port.
  | - (MODPYTHON-144) The &quot;apache.interpreter&quot; and &quot;apache.main_server&quot;
  |   attributes have been made publically available. These were
  |   previously private and not part of the public API.
  | - (MODPYTHON-149) Added support for session objects that span
  |   domains.
  | - (MODPYTHON-153) Added req.discard_request_body() function as
  |   wrapper for similar function provided by Apache C API. The
  |   function tests for and reads any message body in the request,
  |   simply discarding whatever it receives.
  | - (MODPYTHON-164) The req.add_handler(),
  |   req.register_input_filter() and req.register_output_filter()
  |   methods can now take a direct reference to a callable object as
  |   well a string which refers to a module or module::function
  |   combination by name.
  | - (MODPYTHON-165) Exported functions from mod_python module to be
  |   used in other third party modules for Apache. The purpose of
  |   these functions is to allow those other modules to access the
  |   mechanics of how mod_python creates interpreters, thereby
  |   allowing other modules to also embed Python and for there not to
  |   be a conflict with mod_python.
  | - (MODPYTHON-170) Added req._request_rec, server._server_rec and
  |   conn._conn_rec semi private members for getting accessing to
  |   underlying Apache struct as a Python CObject. These can be used
  |   for use in implementing SWIG bindings for lower level APIs of
  |   Apache. These members should be regarded as experimental and
  |   there are no guarantees that they will remain present in this
  |   specific form in the future.
  | - (MODPYTHON-193) Added new attribute available as
  |   req.hlist.location. For a handler executed directly as the result
  |   of a handler directive within a Location directive, this will be
  |   set to the value of the Location directive. If LocationMatch, or
  |   wildcards or regular expressions are used with Location, the
  |   value will be the matched value in the URL and not the pattern.
  |
  | Improvements
  | - (MODPYTHON-27) When using mod_python.publisher, the __auth__()
  |   and __access__() functions and the __auth_realm__ string can now
  |   be nested within a class method as a well a normal function.
  | - (MODPYTHON-90) The PythonEnablePdb configuration option will now
  |   be ignored if Apache hasn't been started up in single process
  |   mode.
  | - (MODPYTHON-91) If running Apache in single process mode with PDB
  |   enabled and the &quot;quit&quot; command is used to exit that debug
  |   session, an exception indicating that the PDB session has been
  |   aborted is raised rather than None being returned with a
  |   subsequent error complaining about the handler returning an
  |   invalid value.
  | - (MODPYTHON-93) Improved util.FieldStorage efficiency and made the
  |   interface more dictionary like.
  | - (MODPYTHON-101) Force an exception when handler evaluates to
  |   something other than None but is otherwise not callable.
  |   Previously an exception would not be generated if the handler
  |   evaluated to False.
  | - (MODPYTHON-107) Neither mod_python.publisher nor mod_python.psp
  |   explicitly flush output after writing the content of the response
  |   back to the request object. By not flushing output it is now
  |   possible to use the &quot;CONTENT_LENGTH&quot; output filter to add a
  |   &quot;Content-Length&quot; header.
  | - (MODPYTHON-111) Note made in session documentation that a save is
  |   required to avoid session timeouts.
  | - (MODPYTHON-125) The req.handler attribute is now writable. This
  |   allows a handler executing in a phase prior to the response phase
  |   to specify which Apache module will be responsible for generating
  |   the content.
  | - (MODPYTHON-128) Made the req.canonical_filename attribute
  |   writable. Changed the req.finfo attribute from being a tuple to
  |   an actual object. For backwards compatibility the attributes of
  |   the object can still be accessed as if they were a tuple. New
  |   code however should access the attributes as member data. The
  |   req.finfo attribute is also now writable and can be assigned to
  |   using the result of calling the new function apache.stat(). This
  |   function is a wrapper for apr_stat().
  | - (MODPYTHON-129) When specifying multiple handlers for a phase,
  |   the status returned by each handler is now treated the same as
  |   how Apache would treat the status if the handler was registered
  |   using the low level C API. What this means is that whereas
  |   stacked handlers of any phase would in turn previously be
  |   executed as long as they returned apache.OK, this is no longer
  |   the case and what happens is dependent on the phase.
  |   Specifically, a handler returning apache.DECLINED no longer
  |   causes the execution of subsequent handlers for the phase to be
  |   skipped. Instead, it will move to the next of the stacked
  |   handlers. In the case of PythonTransHandler, PythonAuthenHandler,
  |   PythonAuthzHandler and PythonTypeHandler, as soon as apache.OK is
  |   returned, subsequent handlers for the phase will be skipped, as
  |   the result indicates that any processing pertinent to that phase
  |   has been completed. For other phases, stacked handlers will
  |   continue to be executed if apache.OK is returned as well as when
  |   apache.DECLINED is returned. This new interpretation of the
  |   status returned also applies to stacked content handlers listed
  |   against the PythonHandler directive even though Apache notionally
  |   only ever calls at most one content handler. Where all stacked
  |   content handlers in that phase run, the status returned from the
  |   last handler becomes the overall status from the content phase.
  | - (MODPYTHON-141) The req.proxyreq and req.uri attributes are now
  |   writable. This allows a handler to setup these values and trigger
  |   proxying of the current request to a remote server.
  | - (MODPYTHON-142) The req.no_cache and req.no_local_copy attributes
  |   are now writable.
  | - (MODPYTHON-143) Completely reimplemented the module importer.
  |   This is now used whenever modules are imported corresponding to
  |   any of the Python*Handler, Python*Filter and PythonImport
  |   directives. The module importer is still able to be used directly
  |   using the apache.import_module() function. The new module
  |   importer no longer supports automatic reloading of
  |   packages/modules that appear on the standard Python module search
  |   path as defined by the PythonPath directive or within an
  |   application by direct changes to sys.path. Automatic module
  |   reloading is however still performed on file based modules (not
  |   packages) which are located within the document tree where
  |   handlers are located.  Locations within the document tree are
  |   however no longer added to the standard Python module search path
  |   automatically as they are maintained within a distinct importer
  |   search path. The PythonPath directive MUST not be used to point
  |   at directories within the document tree. To have additional
  |   directories be searched by the module importer, they should be
  |   listed in the mod_python.importer.path option using the
  |   PythonOption directive. This is a path similar to how PythonPath
  |   argument is supplied, but MUST not reference sys.path nor contain
  |   any directories also listed in the standard Python module search
  |   path. If an application does not appear to work under the module
  |   importer, the old module importer can be reenabled by setting the
  |   mod_python.legacy.importer option using the PythonOption
  |   directive to the value '*'. This option must be set in the global
  |   Apache configuration.
  | - (MODPYTHON-152) When in a sub request, when a request is the
  |   result of an internal redirect, or when when returning from such
  |   a request, the req.main, req.prev and req.next members now
  |   correctly return a reference to the original Python request
  |   object wrapper first created for the specific request_rec
  |   instance rather than creating a new distinct Python request
  |   object. This means that any data added explicitly to a request
  |   object can be passed between such requests.
  | - (MODPYTHON-178) When using mod_python.psp, if the PSP file which
  |   is the target of the request doesn't actually exist, an
  |   apache.HTTP_NOT_FOUND server error is now returned to the client
  |   rather than raising a ValueError exception which results in a 500
  |   internal server error. Note that if using SetHandler and the
  |   request is against the directory and no DirectoryIndex directive
  |   is specified which lists a valid PSP index file, then the same
  |   apache.HTTP_NOT_FOUND server error is returned to the client.
  | - (MODPYTHON-196) For completeness, added req.server.log_error()
  |   and req.connection.log_error(). The latter wraps ap_log_cerror()
  |   (when available), allowing client information to be logged along
  |   with message from a connection handler.
  | - (MODPYTHON-206) The attribute req.used_path_info is now
  |   modifiable and can be set from within handlers. This is
  |   equivalent to having used the AcceptPathInfo directive.
  | - (MODPYTHON-207) The attribute req.args is now modifiable and can
  |   be set from within handlers.
  |
  | Bug Fixes
  | - (MODPYTHON-38) Fixed issue when using PSP pages in conjunction
  |   with publisher handler or where a PSP error page was being
  |   triggered, that form parameters coming from content of a POST
  |   request weren't available or only available using a workaround.
  |   Specifically, the PSP page will now use any FieldStorage object
  |   instance cached as req.form left there by preceding code.
  | - (MODPYTHON-43) Nested __auth__() functions in
  |   mod_python.publisher now execute in context of globals from the
  |   file the function is in and not that of mod_python.publisher
  |   itself.
  | - (MODPYTHON-47) Fixed mod_python.publisher so it will not return a
  |   HTTP Bad Request response when mod_auth is being used to provide
  |   Digest authentication.
  | - (MODPYTHON-63) When handler directives are used within Directory
  |   or DirectoryMatch directives where wildcards or regular
  |   expressions are used, the handler directory will be set to the
  |   shortest directory matched by the directory pattern. Handler
  |   directives can now also be used within Files and FilesMatch
  |   directives and the handler directory will correctly resolve to
  |   the directory corresponding to the enclosing Directory or
  |   DirectoryMatch directive, or the directory the .htaccess file is
  |   contained in.
  | - (MODPYTHON-76) The FilterDispatch callback should not flush the
  |   filter if it has already been closed.
  | - (MODPYTHON-84) The original change to fix the symlink issue for
  |   req.sendfile() was causing problems on Win32, plus code needed to
  |   be changed to work with APR 1.2.7.
  | - (MODPYTHON-100) When using stacked handlers and a SERVER_RETURN
  |   exception was used to return an OK status for that handler, any
  |   following handlers weren't being run if appropriate for the
  |   phase.
  | - (MODPYTHON-109) The Py_Finalize() function was being called on
  |   child process shutdown. This was being done though from within
  |   the context of a signal handler, which is generally unsafe and
  |   would cause the process to lock up. This function is no longer
  |   called on child process shutdown.
  | - (MODPYTHON-112) The req.phase attribute is no longer overwritten
  |   by an input or output filter. The filter.is_input member should
  |   be used to determine if a filter is an input or output filter.
  | - (MODPYTHON-113) The PythonImport directive now uses the
  |   apache.import_module() function to import modules to avoid
  |   reloading problems when same module is imported from a handler.
  | - (MODPYTHON-114) Fixed race conditions on setting sys.path when
  |   the PythonPath directive is being used as well as problems with
  |   infinite extension of path.
  | - (MODPYTHON-120) (MODPYTHON-121) Fixes to test suite so it will
  |   work on virtual hosting environments where localhost doesn't
  |   resolve to 127.0.0.1 but the actual IP address of the host.
  | - (MODPYTHON-126) When Python*Handler or Python*Filter directive is
  |   used inside of a Files directive container, the handler/filter
  |   directory value will now correctly resolve to the directory
  |   corresponding to any parent Directory directive or the location
  |   of the .htaccess file the Files directive is contained in.
  | - (MODPYTHON-133) The table object returned by
  |   req.server.get_config() was not being populated correctly to be
  |   the state of directives set at global scope for the server.
  | - (MODPYTHON-134) Setting PythonDebug to Off, wasn't overriding On
  |   setting in parent scope.
  | - (MODPYTHON-140) The util.redirect() function should be returning
  |   server status of apache.DONE and not apache.OK otherwise it will
  |   not give desired result if used in non content handler phase or
  |   where there are stacked content handlers.
  | - (MODPYTHON-147) Stopped directories being added to sys.path
  |   multiple times when PythonImport and PythonPath directive used.
  | - (MODPYTHON-148) Added missing Apache contants
  |   apache.PROXYREQ_RESPONSE and apache.HTTP_UPGRADE_REQUIRED. Also
  |   added new constants for Apache magic mime types and values for
  |   interpreting the req.connection.keepalive and req.read_body
  |   members.
  | - (MODPYTHON-150) In a multithread MPM, the apache.init() function
  |   could be called more than once for a specific interpreter
  |   instance whereas it should only be called once.
  | - (MODPYTHON-151) Debug error page returned to client when an
  |   exception in a handler occurred wasn't escaping special HTML
  |   characters in the traceback or the details of the exception.
  | - (MODPYTHON-157) Wrong interpreter name used for fixup handler
  |   phase and earlier, when PythonInterpPerDirectory was enabled and
  |   request was against a directory but client didn't provide the
  |   trailing slash.
  | - (MODPYTHON-159) Fix FieldStorage class so that it can handle
  |   multiline headers.
  | - (MODPYTHON-160) Using PythonInterpPerDirective when setting
  |   content handler to run dynamically with req.add_handler() would
  |   cause Apache to crash.
  | - (MODPYTHON-161) Directory argument supplied to req.add_handler()
  |   is canonicalized and a trailing slash added automatically. This
  |   is needed to ensure that the directory is always in POSIX path
  |   style as used by Apache and that convention where directories
  |   associated with directives always have trailing slash is adhered
  |   to. If this is not done, a different interpreter can be chosen to
  |   that expected when the PythonInterpPerDirective is used.
  | - (MODPYTHON-166) PythonHandlerModule was not setting up
  |   registration of the PythonFixupHandler or PythonAuthenHandler.
  |   For the latter this meant that using Require directive with
  |   PythonHandlerModule would cause a 500 error and complaint in
  |   error log about &quot;No groups file&quot;.
  | - (MODPYTHON-167) When PythonDebug was On and and exception
  |   occurred, the response to the client had a status of 200 when it
  |   really should have been a 500 error status indicating that an
  |   internal error occurred. A 500 error status was correctly being
  |   returned when PythonDebug was Off.
  | - (MODPYTHON-168) Fixed psp_parser error when CR is used as a line
  |   terminator in psp code. This may occur with some older editors
  |   such as GoLive on Mac OS X.
  | - (MODPYTHON-175) Fixed problem whereby a main PSP page and an
  |   error page triggered from that page both accessing the session
  |   object would cause a deadlock.
  | - (MODPYTHON-176) Fixed issue whereby PSP code would unlock session
  |   object which it had inherited from the caller meaning caller
  |   could no longer use it safely. PSP code will now only unlock
  |   session if it created it in the first place.
  | - (MODPYTHON-179) Fixed the behaviour of req.readlines() when a
  |   size hint was provided. Previously, it would always return a
  |   single line when a size hint was provided.
  | - (MODPYTHON-180) Publisher would wrongly output a warning about
  |   nothing to publish if req.write() or req.sendfile() used and data
  |   not flushed, and then published function returned None.
  | - (MODPYTHON-181) Fixed memory leak when mod_python handlers are
  |   defined for more than one phase at the same time.
  | - (MODPYTHON-182) Fixed memory leak in req.readline().
  | - (MODPYTHON-184) Fix memory leak in apache.make_table(). This was
  |   used by util.FieldStorage class so affected all code using forms.
  | - (MODPYTHON-185) Fixed segfault in psp.parsestring(src_string)
  |   when src_string is empty.
  | - (MODPYTHON-187) Table objects could crash in various ways when
  |   the value of an item was NULL. This could occur for
  |   SCRIPT_FILENAME when the req.subprocess_env table was accessed in
  |   the post read request handler phase.
  | - (MODPYTHON-189) Fixed representation returned by calling repr()
  |   on a table object.
  | - (MODPYTHON-191) Session class will no longer accept a normal
  |   cookie if a signed cookie was expected.
  | - (MODPYTHON-194) Fixed potential memory leak due to not clearing
  |   the state of thread state objects before deleting them.
  | - (MODPYTHON-195) Fix potential Win32 resource leaks in parent
  |   Apache process when process restarts occur.
  | - (MODPYTHON-198) Python 2.5 broke nested
  |   __auth__/__access__/__auth_realm__ in mod_python.publisher.
  | - (MODPYTHON-200) Fixed problem whereby signed and marshalled
  |   cookies could not be used at the same time. When expecting
  |   marshalled cookie, any signed, but not marshalled cookies will be
  |   returned as normal cookies.</changelog>
<changelog author="poeml@suse.de" date="1161604800">- simplify last fix, so it still builds with python &lt; 2.5.</changelog>
<changelog author="aj@suse.de" date="1159012800">- Fix build with python 2.5.</changelog>
<changelog author="poeml@suse.de" date="1155902400">- update to 3.2.10
  |- New Features
  |  - (MODPYTHON-78) Added support for Apache 2.2.
  |  - (MODPYTHON-94) New req.is_https() and req.ssl_var_lookup()
  |    methods. These communicate direct with the Apache mod_ssl
  |    module, allowing it to be determined if the connection is
  |    using SSL/TLS and what the values of internal ssl variables
  |    are.
  |  - (MODPYTHON-137) New req.server.get_options() method. This
  |    returns the subset of Python options set at global scope
  |    within the Apache configuration. That is, outside of the
  |    context of any VirtualHost, Location, Directory or Files
  |    directives.
  |  - (MODPYTHON-131) The directory used for mutex locks can now be
  |    specified at at compile time using ./configure
  |    --with-mutex-dir value or at run time with PythonOption
  |    mod_python.mutex_directory value.
  |  - (MODPYTHON-145) The number of mutex locks can now be
  |    specified at run time with PythonOption
  |    mod_python.mutex_locks value.
  |  - (MODPYTHON-172) Fixed three memory leaks that were found in
  |    _apachemodule.parse_qsl, req.readlines and util.cfgtree_walk.
  |- Improvements
  |  - (MODPYTHON-77) Third party C modules that use the simplified
  |    API for the Global Interpreter Lock (GIL), as described in
  |    PEP 311, can now be used. The only requirement is that such
  |    modules can only be used in the context of the
  |    &quot;main_interpreter&quot;.
  |  - (MODPYTHON-119) DbmSession unit test no longer uses the
  |    default directory for the dbm file, so the test will not
  |    interfer with the user's current apache instance.
  |  - (MODPYTHON-158) Added additional debugging and logging output
  |    for where mod_python cannot initialise itself properly due to
  |    Python or mod_python version mismatches or missing Python
  |    module code files.
  |- Bug Fixes
  |  - (MODPYTHON-122) Fixed configure problem when using bash 3.1.x.
  |  - (MODPYTHON-173) Fixed DbmSession to create db file with mode 0640.
  |  - (MODPYTHON-84) Fixed request.sendfile() bug for symlinked
  |    files on Win32.
- drop obsolete patches</changelog>
<changelog author="poeml@suse.de" date="1155902400">- update to 3.2.8
  |- New Features:
  |  - New apache.register_cleanup() method.
  |  - New apache.exists_config_define() method.
  |  - New file-based session manager class.
  |  - Session cookie name can be specified.
  |  - The maximum number of mutexes mod_python uses for session
  |    locking can now be specifed at compile time using configure
  |    --with-max-locks.
  |  - New a version attribute in mod_python module.
  |  - New test handler testhandler.py has been added.
  |- Improvements
  |  - Autoreload of a module using apache.import_module() now works
  |    if modification time for the module is different from the
  |    file.  Previously, the module was only reloaded if the the
  |    modification time of the file was more recent. This allows
  |    for a more graceful reload if a file with an older
  |    modification time needs to be restored from backup.
  |  - Fixed the publisher traversal security issue
  |  - Objects hierarchy a la CherryPy can now be published.
  |  - mod_python.c now logs reason for a 500 error
  |  - Calls to PyErr_Print in mod_python.c are now followed by
  |    fflush()
  |  - Using an empty value with PythonOption will unset a
  |    PythonOption key.
  |  - req.path_info is now a read/write member.
  |  - Improvements to FieldStorage allow uploading of large files.
  |    Uploaded files are now streamed to disk, not to memory.
  |  - Path to flex is now discovered at configuration time or can
  |    be specifed using configure --with-flex=/path/to/flex.
  |  - sys.argv is now initialized to [&quot;mod_python&quot;] so that modules
  |    like numarray and pychart can work properly.
  |- Bug Fixes
  |  - Fixed memory leak which resulted from circular references
  |    starting from the request object.
  |  - Fixed memory leak resulting from multiple PythonOption
  |    directives.
  |  - Fixed Multiple/redundant interpreter creation problem.
  |  - Cookie attributes with attribute names prefixed with $ are
  |    now ignored. See Section 4.7 for more information.
  |  - Bug in setting up of config_dir from Handler directives
  |    fixed.
  |  - mod_python.publisher will now support modules with the same
  |    name but in different directories
  |  - Fixed continual reloading of modules problem
  |  - Fixed big marshalled cookies error.
  |  - Fixed mod_python.publisher extension handling
  |  - mod_python.publisher default index file traversal
  |  - mod_python.publisher loading wrong module and giving no
  |    warning/error
  |  - apply_fs_data() now works with &quot;new style&quot; objects
  |  - File descriptor fd closed after ap_send_fd() in
  |    req_sendfile()
  |  - Bug in mem_cleanup in MemorySession fixed.
  |  - Fixed bug in _apache._global_lock() which could cause a
  |    segfault if the lock index parameter is greater number of
  |    mutexes created at mod_python startup.
  |  - Fixed bug where local_ip and local_host in connection object
  |    were returning remote_ip and remote_host instead
  |  - Fixed install_dso Makefile rule so it only installs the dso,
  |    not the python files
  |  - Potential deadlock in psp cache handling fixed
  |  - Fixed bug where sessions are used outside &lt;Directory&gt;
  |    directive.
  |  - Fixed compile problem on IRIX. ln -s requires both TARGET and
  |    LINK_NAME on IRIX. ie. ln -s TARGET LINK_NAME
  |  - Fixed ./configure problem on SuSE Linux 9.2 (x86-64). Python
  |    libraries are in lib64/ for this platform.
  |  - Fixed req.sendfile() problem where sendfile(filename) sends
  |    the incorrect number of bytes when filename is a symlink.
  |  - Fixed problem where util.FieldStorage was not correctly
  |    checking the mime types of POSTed entities
  |  - Fixed conn.local_addr and conn.remote_addr for a better IPv6
  |    support.
  |  - Fixed psp_parser.l to properly escape backslash-n,
  |    backslash-t and backslash-r character sequences.
  |  - Fixed segfault bug when accessing some request object members
  |    (allowed_methods, allowed_xmethods, content_languages) and
  |    some server object members (names, wild_names).
  |  - Fixed request.add_handler() segfault bug when adding a
  |    handler to an empty handler list.
  |  - Fixed PythonAutoReload directive so that AutoReload can be
  |    turned off.
  |  - Fixed connection object read() bug on FreeBSD.
  |  - Fixed potential buffer corruption bug in connection object
  |    read().
- remove references to obsolete APR_STATUS_IS_SUCCESS and
  apr_sockaddr_port_get() for libapr-1.2.7
- drop obsolete mod_python-3.1.3-publisher.dif
- fix installation into the correct libdir, it didn't work anymore</changelog>
<changelog author="aj@suse.de" date="1141473600">- updated to reflect python changes due to #149809</changelog>
</package>
<package pkgid="af53a148a07426158a78122a856e55a83ebd72f0" name="fetchmsttfonts" arch="noarch">
<version epoch="0" ver="11.4" rel="1.2.1"/>
<changelog author="meissner@suse.de" date="1299672000">- 11.4 submission</changelog>
<changelog author="dmueller@suse.de" date="1279022400">- submission for 11.3 (bnc#621540)</changelog>
<changelog author="dmueller@suse.de" date="1276862400">- bump version to 11.3</changelog>
<changelog author="meissner@suse.de" date="1255435200">- fixed to use new sourceforge download URLs. bnc#533112, bnc#546461</changelog>
<changelog author="meissner@suse.de" date="1233144000">- %ghost the font files so they get removed on -e
- run font-config on %postun (for removal), buildrequire it and
  freetype2 for it.</changelog>
<changelog author="meissner@suse.de" date="1229515200">- exit 0 when we are running non-chrooted (oS 11.1 bug in some
  installation methods) bnc#456795</changelog>
<changelog author="meissner@suse.de" date="1228478400">- require coreutils (for /usr/bin/id) and fonts-config
  for minimal builds. bnc#456795</changelog>
<changelog author="ro@suse.de" date="1228132800">- insert newline after macro to help macro expansion ...</changelog>
<changelog author="coolo@suse.de" date="1228046400">- according to my test case, it works if there is no provides/obsoletes
  to the old name</changelog>
<changelog author="meissner@suse.de" date="1227873600">- reviewed and adjusted server list. Some servers no longer
  carried the fonts.</changelog>
</package>
<package pkgid="7c3ecf765b398579eb7ac6476399292d390d951b" name="fetchmsttfonts" arch="src">
<version epoch="0" ver="11.4" rel="1.2.1"/>
<changelog author="meissner@suse.de" date="1299672000">- 11.4 submission</changelog>
<changelog author="dmueller@suse.de" date="1279022400">- submission for 11.3 (bnc#621540)</changelog>
<changelog author="dmueller@suse.de" date="1276862400">- bump version to 11.3</changelog>
<changelog author="meissner@suse.de" date="1255435200">- fixed to use new sourceforge download URLs. bnc#533112, bnc#546461</changelog>
<changelog author="meissner@suse.de" date="1233144000">- %ghost the font files so they get removed on -e
- run font-config on %postun (for removal), buildrequire it and
  freetype2 for it.</changelog>
<changelog author="meissner@suse.de" date="1229515200">- exit 0 when we are running non-chrooted (oS 11.1 bug in some
  installation methods) bnc#456795</changelog>
<changelog author="meissner@suse.de" date="1228478400">- require coreutils (for /usr/bin/id) and fonts-config
  for minimal builds. bnc#456795</changelog>
<changelog author="ro@suse.de" date="1228132800">- insert newline after macro to help macro expansion ...</changelog>
<changelog author="coolo@suse.de" date="1228046400">- according to my test case, it works if there is no provides/obsoletes
  to the old name</changelog>
<changelog author="meissner@suse.de" date="1227873600">- reviewed and adjusted server list. Some servers no longer
  carried the fonts.</changelog>
<changelog author="dmueller@suse.de" date="1227873600">- update for 11.1
  * add eula to package</changelog>
<changelog author="meissner@suse.de" date="1214308800">- initial package
  - included fetchmsttfonts.sh script from 10.3</changelog>
</package>
<package pkgid="95b7ed3bd7db44ba62885877468ef8ae9862ccd6" name="libgjs-devel" arch="x86_64">
<version epoch="0" ver="0.7.11" rel="1.3.1"/>
<changelog author="dimstar@opensuse.org" date="1298980800">- Update to version 0.7.11:
  + Add gjs_context_maybe_gc() which is similar to JS_MaybeGC but
    tries to account for native allocations made directly from libc
    when determining if GC is useful. Also invoke after creating
    new native objects.
  + Adapt to additional xulrunner 2.0 changes
  + Add back debugger module, with single nativeTrap() function to
    trigger debugger breakpoint
  + Fix bug with looking up namespaced native modules
  + Memory leak fix
  + Build fixes
- Drop gjs-xulrunner20b11-fix.patch: fixed upstream.
- This update addresses bnc#676079.</changelog>
<changelog author="vuntz@opensuse.org" date="1298289600">- Add gjs-xulrunner20b11-fix.patch to adapt to API changes in
  latest xulrunner.</changelog>
<changelog author="vuntz@opensuse.org" date="1296129600">- Update to version 0.7.10:
  + xul2: use JS_NewCompartmentAndGlobalObject to avoid crash with
    latest xulrunner 2.
  + console: don't segfault on huge lines</changelog>
<changelog author="vuntz@opensuse.org" date="1295265600">- Update to version 0.7.9:
  + Adapt to JS_GetStringChars removal in xulrunner 2.
  + Handle wide ranging enum values better.
  + Some tests fixes.
- Add Url tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1293019200">- Update to version 0.7.8:
  + Add a js-version property the GjsContext object and also allow
    specifying a specific version via a comment of the form
    '// application/javascript;version=1.8'. If no version is
    specified, all SpiderMonkey extensions are allowed.
  + Integrate with cairo-gobject library for support of boxed
    Cairo types
  + Add support for (out caller-allocates)
  + Add support for gunichar type
  + Support signals with G_TYPE_POINTER argument using
    introspection information
  + When invoking callback for void-returning async D-Bus method
    implementations, allow empty parameter list instead of []
  + Ignore empty elements in the module search path instead of
    treating them as the current directory
  + Handle removal of JS_GetStringBytes() in Spidermonkey
  + Handle removal of JS_GetFunctionName() in Spidermonkey
  + Use new g_object_info_find_method_using_interfaces() to allow
    future caching.
  + Improve efficiency of module search
  + Fix problems with JS_Add/RemoveRoot pairing
  + Memory management fixes
  + Improve error and debugging messages
  + Build fixes
  + Bugs fixed: bgo#624811, bgo#632551, bgo#632626, bgo#632925,
    bgo#633199, bgo#633477, bgo#635359, bgo#635368, bgo#635371,
    bgo#635707, bgo#636263, bgo#636619, bgo#636927, bgo#636928,
    bgo#637246</changelog>
<changelog author="vuntz@opensuse.org" date="1291377600">- Add explicit Requires of mozilla-xulrunner%{xulrunner_ver} to
  libgjs0: the Requires on libmozjs.so is not enough, as there
  might be more than one provider, and it could be the wrong
  version of xulrunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289908800">- Update to version 0.7.7:
  + bgo#632159: Adapt to removal of SlowNative functions
  + Support more recent development versions of XulRunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289822400">- Update to version 0.7.6:
  + bgo#610859: Add makeProxyClass() function to the dbus module
    for easy creation of proxy classes.
  + Add an extra test case.
  + Build fixes.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Use pkgconfig BuildRequires when possible:
  + old BuildRequires: cairo-devel, dbus-1-glib-devel,
    gobject-introspection-devel.
  + new BuildRequires: cairo, dbus-glib-1 and
    gobject-introspection-1.0.
- Rename libgjs-0 to libgjs0: this is the correct SLPP name. Add
  appropriate Provides/Obsoletes.
- Do not add explicit Requires of dbus-1-devel and
  gobject-introspection-devel for libgjs-devel: they will be added
  automatically.
- Use %_smp_mflags, make and %make_install, following our new best
  packaging practices.</changelog>
<changelog author="vuntz@opensuse.org" date="1288267200">- Update to version 0.7.5:
  + Replace JS_SealObject by JS_FreezeObject.
  + Port all functions to JSFUN_FAST_NATIVE.
  + JS_IsNativeFrame replaced by JS_IsScriptFrame.
  + Separate &quot;basic&quot; API from &quot;embedder/module&quot;.
  + Build fixes.
- Build against mozilla-xulrunner20 in 11.4 and later, and stop
  supporting the 11.1 build (that was using mozilla-xulrunner190).</changelog>
<changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.7.4:
  + Require single include use of headers.
  + Support xulrunner 1.9.3.
  + Make gjs_profiler_reset public.
  + Remove &quot;debugger&quot; module.
  + Replace call context with a concept of &quot;current context&quot;.
  + Replace &quot;load context&quot; with a &quot;import global&quot;.
  + Various other fixes.
- Drop gjs_gi_probes.d, gjs.stp.in source files: they are now
  included in tarball.</changelog>
<changelog author="vuntz@opensuse.org" date="1284638400">- Update to version 0.7.2:
  + Fix 64 bit issues.
  + Explicitly link gjs-console against glib.
  + Update to (and require) gobject-introspection 0.9.5.
  + Various other fixes.
- Remove gir-repository Recommends: all the interesting gir files
  are now directly shipped with the libraries.</changelog>
<changelog author="vuntz@opensuse.org" date="1279886400">- Update to version 0.7.1:
  + Add support for GArray to gjs_value_from_g_argument
  + Add support for GArray to gjs_value_to_g_argument
  + Add support for dtrace/SystemTap
  + Add a promise module
  + Handle GValues of type G_TYPE_STRV
  + [gdb-check] Add a script for easier use
  + Throw a better warning for GValues containing container types
  + [importer] Allow native modules in gjs.so
  + [gjs] Add a byteArray module.
  + Adjust for g-i change to remove machine-independent type tags
  + Various other fixes.
- Drop gjs-bgo623775.patch: fixed upstream.
- Enable systemtap support: add systemtap-sdt-devel BuildRequires,
  pass --enable-systemtap to configure. Add gjs_gi_probes.d and
  gjs.stp.in source files, which are missing from the tarball
  (bgo#625090).</changelog>
<changelog author="dimstar@opensuse.org" date="1279195200">- Add gjs-bgo623775.patch, from upstream git to fix build with
  gobject-introspection 0.9.2.</changelog>
<changelog author="dimstar@opensuse.org" date="1275048000">- Update to version 0.7:
  + Add support for &quot;foreign structs&quot; - which are structures that
    are referenced from gobject-introspection, but need glue
    code to actually handle them.
  + Hook cairo bindings to integrate with gobject-introspected
    libraries using new foreign struct support
  + Start working toward thread-safety by adding
    JS_BeginRequest/JS_EndRequest calls throughout the codebase
  + add Tweener.setTimeScale and Tweener.getTimeScale
  + Wrap cairo_copy_path, cairo_copy_path_flat, and
    cairo_append_path
  + Handle destroy callbacks of type other than GDestroyNotify
  + Handle flag arguments not registered with GObject
  + Log errors that occur in callbacks
  + Code cleanup
  + Build fixes
  + Bugs fixed: bgo#610357, bgo#614055, bgo#614344, bgo#615078,
    bgo#615222, bgo#617343, bgo#617568, bgo#617702, bgo#617972,
    bgo#618190, bgo#618195, bgo#618200, bgo#618201</changelog>
<changelog author="vuntz@opensuse.org" date="1269604800">- Build against mozilla-xulrunner192-devel on openSUSE &gt; 11.2.
- Add dbus-1-devel Requires to devel package.</changelog>
<changelog author="dimstar@opensuse.org" date="1269000000">- Update to version 0.6:
  + Optimize function invocation using libffi directly, speeding up
    function invocation benchmarks by as much as 30%.
  + Add a native Cairo module
  + Don't include user_data arguments for callbacks, in Javascript
    you should use closures instead
  + Add a --command/-c argument to gjs-console
  + Add gjs_context_get_native_context() to allow access to the
    native context
  + Improve internal API support for collecting function arguments
    and defining types
  + Add examples using gio and libsoup
  + Add datadir/share/gjs-1.0 to searchpath in addition to
    XDG_DATA_DIRS
  + Add -rpath for libmozjs when linking gjs-console
  + Improve test cases and add internal assertions
  + Bugs fixed: bgo#561524, bgo#604074, bgo#604076, bgo#606258,
    bgo#609691, bgo#609830, bgo#610320, bgo#610370, bgo#610574,
    bgo#611529, bgo#611585, bgo#611590, bgo#611591, bgo#611811.
    bgo#613106
- BuildRequire cairo-devel.</changelog>
<changelog author="dimstar@opensuse.org" date="1266321600">- Update to version 0.5:
  + Add a test for DBus.getcurrentMessageContext()
  + [dbus] include service name in error messages
  + gjs_define_object_class(): generate correct object hierarchy
  + Log the gjs-console command-line on startup
  + move gjs_error_reporter into a C++ file jsapi-private.cpp
  + don't use PTRDIFF macro from private spidermonkey header
  + Require C++
  + bgo#584558 - Need print() function
  + Enable JIT if we can, by default
  + Make things build with glib 2.16
  + Allow null/undefined to be passed in to callbacks
  + Support for callback functions
- BuildRequire gcc-c++.</changelog>
<changelog author="vuntz@novell.com" date="1251288000">- Update to version 0.4:
  + Use g_boxed methods for GValue copying/freeing
  + Add symbolic link from gjs to gjs-console in $(bindir)
  + Use gssize in gjs_string_from_utf8/gjs_string_from_filename
  + Don't use undefined variable in dbus exception
  + Add gjs_parse_args
  + Add a gettext module
  + Better toString() for introspection objects
  +  Port modules/mainloop to gjs_parse_args
  + scripts: don't hardcode path to python
  + switch DEBUG_DBUS_MARSHAL log messages to be compiled out by
    default
  + bgo#560048 - Use JS_SetPropertyAttributes to seal imports
  + autoconf-2.64 compat: Don't use $(builddir) or
    $(abs_top_builddir)
  + Fix gjs_crash_after_timeout() problems</changelog>
<changelog author="vuntz@novell.com" date="1249560000">- Build against mozilla-xulrunner191.</changelog>
<changelog author="vuntz@novell.com" date="1246968000">- Update to version 0.3:
  + DBus support
  + Support simple fields for boxed types
  + Support &quot;copy construction&quot; of boxed types
  + Support simple structures not registered as boxed
  - Allow access to nested structures
  - Allow direct assignment to nested structure fields
  - Allow enum and flag structure fields
  - Allow creating boxed wrapper without copy
  + Support for non-default constructor (i.e. constructors like
    GdkPixbuf.Pixbuf.new_from_file(file))
  + Add a Lang.bind function which binds the meaning of 'this'
  + Add an interactive console gjs-console
  + Allow code in directory modules (i.e. the code should reside in
    __init__.js files)
  + Fix handling of enum/flags return values
  + Handle non-gobject-registered flags
  + Add Tweener.registerSpecialProperty to tweener module
  + Add profiler for javascript code
  + Add gjs_context_get_all and gjs_dumpstack - useful to invoke
    from a debugger such as gdb
  + Support GHashTable
  + Add support for UNIX shebang (i.e. #!/usr/bin/gjs-console)
  + Support new introspection short/ushort type tags
  + Support GI_TYPE_TAG_FILENAME
  + Improve support for machine-dependent integer types and arrays
    of integers
  + Fix several memory leaks
  + Bugs fixed: bgo#560506, bgo#560670, bgo#560808, bgo#561514,
    bgo#561516, bgo#561849, bgo#562892, bgo#564424, bgo#564664,
    bgo#566185, bgo#567675, bgo#569178, bgo#570775, bgo#570964,
    bgo#580948, bgo#584560, bgo#584850, bgo#584858, bgo#584858,
    bgo#585386, bgo#585460, bgo#586665, bgo#586760, bgo#561203,
    bgo#561573, bgo#561585, bgo#561664, bgo#561686, bgo#561812,
    bgo#562575, bgo#565029, bgo#567078, bgo#569374, bgo#572113,
    bgo#572121, bgo#572130, bgo#572258, bgo#580865, bgo#580947,
    bgo#580957, bgo#581277, bgo#581384, bgo#581385, bgo#581389,
    bgo#582686, bgo#582704, bgo#582707, bgo#584849, bgo#560808
- Add dbus-1-glib-devel BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1241179200">- Initial package.</changelog>
</package>
<package pkgid="1e76279833654189ef8364632c4e22e590fc7c4a" name="libgjs0" arch="i586">
<version epoch="0" ver="0.7.11" rel="1.3.1"/>
<changelog author="dimstar@opensuse.org" date="1298980800">- Update to version 0.7.11:
  + Add gjs_context_maybe_gc() which is similar to JS_MaybeGC but
    tries to account for native allocations made directly from libc
    when determining if GC is useful. Also invoke after creating
    new native objects.
  + Adapt to additional xulrunner 2.0 changes
  + Add back debugger module, with single nativeTrap() function to
    trigger debugger breakpoint
  + Fix bug with looking up namespaced native modules
  + Memory leak fix
  + Build fixes
- Drop gjs-xulrunner20b11-fix.patch: fixed upstream.
- This update addresses bnc#676079.</changelog>
<changelog author="vuntz@opensuse.org" date="1298289600">- Add gjs-xulrunner20b11-fix.patch to adapt to API changes in
  latest xulrunner.</changelog>
<changelog author="vuntz@opensuse.org" date="1296129600">- Update to version 0.7.10:
  + xul2: use JS_NewCompartmentAndGlobalObject to avoid crash with
    latest xulrunner 2.
  + console: don't segfault on huge lines</changelog>
<changelog author="vuntz@opensuse.org" date="1295265600">- Update to version 0.7.9:
  + Adapt to JS_GetStringChars removal in xulrunner 2.
  + Handle wide ranging enum values better.
  + Some tests fixes.
- Add Url tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1293019200">- Update to version 0.7.8:
  + Add a js-version property the GjsContext object and also allow
    specifying a specific version via a comment of the form
    '// application/javascript;version=1.8'. If no version is
    specified, all SpiderMonkey extensions are allowed.
  + Integrate with cairo-gobject library for support of boxed
    Cairo types
  + Add support for (out caller-allocates)
  + Add support for gunichar type
  + Support signals with G_TYPE_POINTER argument using
    introspection information
  + When invoking callback for void-returning async D-Bus method
    implementations, allow empty parameter list instead of []
  + Ignore empty elements in the module search path instead of
    treating them as the current directory
  + Handle removal of JS_GetStringBytes() in Spidermonkey
  + Handle removal of JS_GetFunctionName() in Spidermonkey
  + Use new g_object_info_find_method_using_interfaces() to allow
    future caching.
  + Improve efficiency of module search
  + Fix problems with JS_Add/RemoveRoot pairing
  + Memory management fixes
  + Improve error and debugging messages
  + Build fixes
  + Bugs fixed: bgo#624811, bgo#632551, bgo#632626, bgo#632925,
    bgo#633199, bgo#633477, bgo#635359, bgo#635368, bgo#635371,
    bgo#635707, bgo#636263, bgo#636619, bgo#636927, bgo#636928,
    bgo#637246</changelog>
<changelog author="vuntz@opensuse.org" date="1291377600">- Add explicit Requires of mozilla-xulrunner%{xulrunner_ver} to
  libgjs0: the Requires on libmozjs.so is not enough, as there
  might be more than one provider, and it could be the wrong
  version of xulrunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289908800">- Update to version 0.7.7:
  + bgo#632159: Adapt to removal of SlowNative functions
  + Support more recent development versions of XulRunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289822400">- Update to version 0.7.6:
  + bgo#610859: Add makeProxyClass() function to the dbus module
    for easy creation of proxy classes.
  + Add an extra test case.
  + Build fixes.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Use pkgconfig BuildRequires when possible:
  + old BuildRequires: cairo-devel, dbus-1-glib-devel,
    gobject-introspection-devel.
  + new BuildRequires: cairo, dbus-glib-1 and
    gobject-introspection-1.0.
- Rename libgjs-0 to libgjs0: this is the correct SLPP name. Add
  appropriate Provides/Obsoletes.
- Do not add explicit Requires of dbus-1-devel and
  gobject-introspection-devel for libgjs-devel: they will be added
  automatically.
- Use %_smp_mflags, make and %make_install, following our new best
  packaging practices.</changelog>
<changelog author="vuntz@opensuse.org" date="1288267200">- Update to version 0.7.5:
  + Replace JS_SealObject by JS_FreezeObject.
  + Port all functions to JSFUN_FAST_NATIVE.
  + JS_IsNativeFrame replaced by JS_IsScriptFrame.
  + Separate &quot;basic&quot; API from &quot;embedder/module&quot;.
  + Build fixes.
- Build against mozilla-xulrunner20 in 11.4 and later, and stop
  supporting the 11.1 build (that was using mozilla-xulrunner190).</changelog>
<changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.7.4:
  + Require single include use of headers.
  + Support xulrunner 1.9.3.
  + Make gjs_profiler_reset public.
  + Remove &quot;debugger&quot; module.
  + Replace call context with a concept of &quot;current context&quot;.
  + Replace &quot;load context&quot; with a &quot;import global&quot;.
  + Various other fixes.
- Drop gjs_gi_probes.d, gjs.stp.in source files: they are now
  included in tarball.</changelog>
<changelog author="vuntz@opensuse.org" date="1284638400">- Update to version 0.7.2:
  + Fix 64 bit issues.
  + Explicitly link gjs-console against glib.
  + Update to (and require) gobject-introspection 0.9.5.
  + Various other fixes.
- Remove gir-repository Recommends: all the interesting gir files
  are now directly shipped with the libraries.</changelog>
<changelog author="vuntz@opensuse.org" date="1279886400">- Update to version 0.7.1:
  + Add support for GArray to gjs_value_from_g_argument
  + Add support for GArray to gjs_value_to_g_argument
  + Add support for dtrace/SystemTap
  + Add a promise module
  + Handle GValues of type G_TYPE_STRV
  + [gdb-check] Add a script for easier use
  + Throw a better warning for GValues containing container types
  + [importer] Allow native modules in gjs.so
  + [gjs] Add a byteArray module.
  + Adjust for g-i change to remove machine-independent type tags
  + Various other fixes.
- Drop gjs-bgo623775.patch: fixed upstream.
- Enable systemtap support: add systemtap-sdt-devel BuildRequires,
  pass --enable-systemtap to configure. Add gjs_gi_probes.d and
  gjs.stp.in source files, which are missing from the tarball
  (bgo#625090).</changelog>
<changelog author="dimstar@opensuse.org" date="1279195200">- Add gjs-bgo623775.patch, from upstream git to fix build with
  gobject-introspection 0.9.2.</changelog>
<changelog author="dimstar@opensuse.org" date="1275048000">- Update to version 0.7:
  + Add support for &quot;foreign structs&quot; - which are structures that
    are referenced from gobject-introspection, but need glue
    code to actually handle them.
  + Hook cairo bindings to integrate with gobject-introspected
    libraries using new foreign struct support
  + Start working toward thread-safety by adding
    JS_BeginRequest/JS_EndRequest calls throughout the codebase
  + add Tweener.setTimeScale and Tweener.getTimeScale
  + Wrap cairo_copy_path, cairo_copy_path_flat, and
    cairo_append_path
  + Handle destroy callbacks of type other than GDestroyNotify
  + Handle flag arguments not registered with GObject
  + Log errors that occur in callbacks
  + Code cleanup
  + Build fixes
  + Bugs fixed: bgo#610357, bgo#614055, bgo#614344, bgo#615078,
    bgo#615222, bgo#617343, bgo#617568, bgo#617702, bgo#617972,
    bgo#618190, bgo#618195, bgo#618200, bgo#618201</changelog>
<changelog author="vuntz@opensuse.org" date="1269604800">- Build against mozilla-xulrunner192-devel on openSUSE &gt; 11.2.
- Add dbus-1-devel Requires to devel package.</changelog>
<changelog author="dimstar@opensuse.org" date="1269000000">- Update to version 0.6:
  + Optimize function invocation using libffi directly, speeding up
    function invocation benchmarks by as much as 30%.
  + Add a native Cairo module
  + Don't include user_data arguments for callbacks, in Javascript
    you should use closures instead
  + Add a --command/-c argument to gjs-console
  + Add gjs_context_get_native_context() to allow access to the
    native context
  + Improve internal API support for collecting function arguments
    and defining types
  + Add examples using gio and libsoup
  + Add datadir/share/gjs-1.0 to searchpath in addition to
    XDG_DATA_DIRS
  + Add -rpath for libmozjs when linking gjs-console
  + Improve test cases and add internal assertions
  + Bugs fixed: bgo#561524, bgo#604074, bgo#604076, bgo#606258,
    bgo#609691, bgo#609830, bgo#610320, bgo#610370, bgo#610574,
    bgo#611529, bgo#611585, bgo#611590, bgo#611591, bgo#611811.
    bgo#613106
- BuildRequire cairo-devel.</changelog>
<changelog author="dimstar@opensuse.org" date="1266321600">- Update to version 0.5:
  + Add a test for DBus.getcurrentMessageContext()
  + [dbus] include service name in error messages
  + gjs_define_object_class(): generate correct object hierarchy
  + Log the gjs-console command-line on startup
  + move gjs_error_reporter into a C++ file jsapi-private.cpp
  + don't use PTRDIFF macro from private spidermonkey header
  + Require C++
  + bgo#584558 - Need print() function
  + Enable JIT if we can, by default
  + Make things build with glib 2.16
  + Allow null/undefined to be passed in to callbacks
  + Support for callback functions
- BuildRequire gcc-c++.</changelog>
<changelog author="vuntz@novell.com" date="1251288000">- Update to version 0.4:
  + Use g_boxed methods for GValue copying/freeing
  + Add symbolic link from gjs to gjs-console in $(bindir)
  + Use gssize in gjs_string_from_utf8/gjs_string_from_filename
  + Don't use undefined variable in dbus exception
  + Add gjs_parse_args
  + Add a gettext module
  + Better toString() for introspection objects
  +  Port modules/mainloop to gjs_parse_args
  + scripts: don't hardcode path to python
  + switch DEBUG_DBUS_MARSHAL log messages to be compiled out by
    default
  + bgo#560048 - Use JS_SetPropertyAttributes to seal imports
  + autoconf-2.64 compat: Don't use $(builddir) or
    $(abs_top_builddir)
  + Fix gjs_crash_after_timeout() problems</changelog>
<changelog author="vuntz@novell.com" date="1249560000">- Build against mozilla-xulrunner191.</changelog>
<changelog author="vuntz@novell.com" date="1246968000">- Update to version 0.3:
  + DBus support
  + Support simple fields for boxed types
  + Support &quot;copy construction&quot; of boxed types
  + Support simple structures not registered as boxed
  - Allow access to nested structures
  - Allow direct assignment to nested structure fields
  - Allow enum and flag structure fields
  - Allow creating boxed wrapper without copy
  + Support for non-default constructor (i.e. constructors like
    GdkPixbuf.Pixbuf.new_from_file(file))
  + Add a Lang.bind function which binds the meaning of 'this'
  + Add an interactive console gjs-console
  + Allow code in directory modules (i.e. the code should reside in
    __init__.js files)
  + Fix handling of enum/flags return values
  + Handle non-gobject-registered flags
  + Add Tweener.registerSpecialProperty to tweener module
  + Add profiler for javascript code
  + Add gjs_context_get_all and gjs_dumpstack - useful to invoke
    from a debugger such as gdb
  + Support GHashTable
  + Add support for UNIX shebang (i.e. #!/usr/bin/gjs-console)
  + Support new introspection short/ushort type tags
  + Support GI_TYPE_TAG_FILENAME
  + Improve support for machine-dependent integer types and arrays
    of integers
  + Fix several memory leaks
  + Bugs fixed: bgo#560506, bgo#560670, bgo#560808, bgo#561514,
    bgo#561516, bgo#561849, bgo#562892, bgo#564424, bgo#564664,
    bgo#566185, bgo#567675, bgo#569178, bgo#570775, bgo#570964,
    bgo#580948, bgo#584560, bgo#584850, bgo#584858, bgo#584858,
    bgo#585386, bgo#585460, bgo#586665, bgo#586760, bgo#561203,
    bgo#561573, bgo#561585, bgo#561664, bgo#561686, bgo#561812,
    bgo#562575, bgo#565029, bgo#567078, bgo#569374, bgo#572113,
    bgo#572121, bgo#572130, bgo#572258, bgo#580865, bgo#580947,
    bgo#580957, bgo#581277, bgo#581384, bgo#581385, bgo#581389,
    bgo#582686, bgo#582704, bgo#582707, bgo#584849, bgo#560808
- Add dbus-1-glib-devel BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1241179200">- Initial package.</changelog>
</package>
<package pkgid="d77ca615cbc56989a6e74eb38183be5fdea924ef" name="gjs" arch="i586">
<version epoch="0" ver="0.7.11" rel="1.3.1"/>
<changelog author="dimstar@opensuse.org" date="1298980800">- Update to version 0.7.11:
  + Add gjs_context_maybe_gc() which is similar to JS_MaybeGC but
    tries to account for native allocations made directly from libc
    when determining if GC is useful. Also invoke after creating
    new native objects.
  + Adapt to additional xulrunner 2.0 changes
  + Add back debugger module, with single nativeTrap() function to
    trigger debugger breakpoint
  + Fix bug with looking up namespaced native modules
  + Memory leak fix
  + Build fixes
- Drop gjs-xulrunner20b11-fix.patch: fixed upstream.
- This update addresses bnc#676079.</changelog>
<changelog author="vuntz@opensuse.org" date="1298289600">- Add gjs-xulrunner20b11-fix.patch to adapt to API changes in
  latest xulrunner.</changelog>
<changelog author="vuntz@opensuse.org" date="1296129600">- Update to version 0.7.10:
  + xul2: use JS_NewCompartmentAndGlobalObject to avoid crash with
    latest xulrunner 2.
  + console: don't segfault on huge lines</changelog>
<changelog author="vuntz@opensuse.org" date="1295265600">- Update to version 0.7.9:
  + Adapt to JS_GetStringChars removal in xulrunner 2.
  + Handle wide ranging enum values better.
  + Some tests fixes.
- Add Url tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1293019200">- Update to version 0.7.8:
  + Add a js-version property the GjsContext object and also allow
    specifying a specific version via a comment of the form
    '// application/javascript;version=1.8'. If no version is
    specified, all SpiderMonkey extensions are allowed.
  + Integrate with cairo-gobject library for support of boxed
    Cairo types
  + Add support for (out caller-allocates)
  + Add support for gunichar type
  + Support signals with G_TYPE_POINTER argument using
    introspection information
  + When invoking callback for void-returning async D-Bus method
    implementations, allow empty parameter list instead of []
  + Ignore empty elements in the module search path instead of
    treating them as the current directory
  + Handle removal of JS_GetStringBytes() in Spidermonkey
  + Handle removal of JS_GetFunctionName() in Spidermonkey
  + Use new g_object_info_find_method_using_interfaces() to allow
    future caching.
  + Improve efficiency of module search
  + Fix problems with JS_Add/RemoveRoot pairing
  + Memory management fixes
  + Improve error and debugging messages
  + Build fixes
  + Bugs fixed: bgo#624811, bgo#632551, bgo#632626, bgo#632925,
    bgo#633199, bgo#633477, bgo#635359, bgo#635368, bgo#635371,
    bgo#635707, bgo#636263, bgo#636619, bgo#636927, bgo#636928,
    bgo#637246</changelog>
<changelog author="vuntz@opensuse.org" date="1291377600">- Add explicit Requires of mozilla-xulrunner%{xulrunner_ver} to
  libgjs0: the Requires on libmozjs.so is not enough, as there
  might be more than one provider, and it could be the wrong
  version of xulrunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289908800">- Update to version 0.7.7:
  + bgo#632159: Adapt to removal of SlowNative functions
  + Support more recent development versions of XulRunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289822400">- Update to version 0.7.6:
  + bgo#610859: Add makeProxyClass() function to the dbus module
    for easy creation of proxy classes.
  + Add an extra test case.
  + Build fixes.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Use pkgconfig BuildRequires when possible:
  + old BuildRequires: cairo-devel, dbus-1-glib-devel,
    gobject-introspection-devel.
  + new BuildRequires: cairo, dbus-glib-1 and
    gobject-introspection-1.0.
- Rename libgjs-0 to libgjs0: this is the correct SLPP name. Add
  appropriate Provides/Obsoletes.
- Do not add explicit Requires of dbus-1-devel and
  gobject-introspection-devel for libgjs-devel: they will be added
  automatically.
- Use %_smp_mflags, make and %make_install, following our new best
  packaging practices.</changelog>
<changelog author="vuntz@opensuse.org" date="1288267200">- Update to version 0.7.5:
  + Replace JS_SealObject by JS_FreezeObject.
  + Port all functions to JSFUN_FAST_NATIVE.
  + JS_IsNativeFrame replaced by JS_IsScriptFrame.
  + Separate &quot;basic&quot; API from &quot;embedder/module&quot;.
  + Build fixes.
- Build against mozilla-xulrunner20 in 11.4 and later, and stop
  supporting the 11.1 build (that was using mozilla-xulrunner190).</changelog>
<changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.7.4:
  + Require single include use of headers.
  + Support xulrunner 1.9.3.
  + Make gjs_profiler_reset public.
  + Remove &quot;debugger&quot; module.
  + Replace call context with a concept of &quot;current context&quot;.
  + Replace &quot;load context&quot; with a &quot;import global&quot;.
  + Various other fixes.
- Drop gjs_gi_probes.d, gjs.stp.in source files: they are now
  included in tarball.</changelog>
<changelog author="vuntz@opensuse.org" date="1284638400">- Update to version 0.7.2:
  + Fix 64 bit issues.
  + Explicitly link gjs-console against glib.
  + Update to (and require) gobject-introspection 0.9.5.
  + Various other fixes.
- Remove gir-repository Recommends: all the interesting gir files
  are now directly shipped with the libraries.</changelog>
<changelog author="vuntz@opensuse.org" date="1279886400">- Update to version 0.7.1:
  + Add support for GArray to gjs_value_from_g_argument
  + Add support for GArray to gjs_value_to_g_argument
  + Add support for dtrace/SystemTap
  + Add a promise module
  + Handle GValues of type G_TYPE_STRV
  + [gdb-check] Add a script for easier use
  + Throw a better warning for GValues containing container types
  + [importer] Allow native modules in gjs.so
  + [gjs] Add a byteArray module.
  + Adjust for g-i change to remove machine-independent type tags
  + Various other fixes.
- Drop gjs-bgo623775.patch: fixed upstream.
- Enable systemtap support: add systemtap-sdt-devel BuildRequires,
  pass --enable-systemtap to configure. Add gjs_gi_probes.d and
  gjs.stp.in source files, which are missing from the tarball
  (bgo#625090).</changelog>
<changelog author="dimstar@opensuse.org" date="1279195200">- Add gjs-bgo623775.patch, from upstream git to fix build with
  gobject-introspection 0.9.2.</changelog>
<changelog author="dimstar@opensuse.org" date="1275048000">- Update to version 0.7:
  + Add support for &quot;foreign structs&quot; - which are structures that
    are referenced from gobject-introspection, but need glue
    code to actually handle them.
  + Hook cairo bindings to integrate with gobject-introspected
    libraries using new foreign struct support
  + Start working toward thread-safety by adding
    JS_BeginRequest/JS_EndRequest calls throughout the codebase
  + add Tweener.setTimeScale and Tweener.getTimeScale
  + Wrap cairo_copy_path, cairo_copy_path_flat, and
    cairo_append_path
  + Handle destroy callbacks of type other than GDestroyNotify
  + Handle flag arguments not registered with GObject
  + Log errors that occur in callbacks
  + Code cleanup
  + Build fixes
  + Bugs fixed: bgo#610357, bgo#614055, bgo#614344, bgo#615078,
    bgo#615222, bgo#617343, bgo#617568, bgo#617702, bgo#617972,
    bgo#618190, bgo#618195, bgo#618200, bgo#618201</changelog>
<changelog author="vuntz@opensuse.org" date="1269604800">- Build against mozilla-xulrunner192-devel on openSUSE &gt; 11.2.
- Add dbus-1-devel Requires to devel package.</changelog>
<changelog author="dimstar@opensuse.org" date="1269000000">- Update to version 0.6:
  + Optimize function invocation using libffi directly, speeding up
    function invocation benchmarks by as much as 30%.
  + Add a native Cairo module
  + Don't include user_data arguments for callbacks, in Javascript
    you should use closures instead
  + Add a --command/-c argument to gjs-console
  + Add gjs_context_get_native_context() to allow access to the
    native context
  + Improve internal API support for collecting function arguments
    and defining types
  + Add examples using gio and libsoup
  + Add datadir/share/gjs-1.0 to searchpath in addition to
    XDG_DATA_DIRS
  + Add -rpath for libmozjs when linking gjs-console
  + Improve test cases and add internal assertions
  + Bugs fixed: bgo#561524, bgo#604074, bgo#604076, bgo#606258,
    bgo#609691, bgo#609830, bgo#610320, bgo#610370, bgo#610574,
    bgo#611529, bgo#611585, bgo#611590, bgo#611591, bgo#611811.
    bgo#613106
- BuildRequire cairo-devel.</changelog>
<changelog author="dimstar@opensuse.org" date="1266321600">- Update to version 0.5:
  + Add a test for DBus.getcurrentMessageContext()
  + [dbus] include service name in error messages
  + gjs_define_object_class(): generate correct object hierarchy
  + Log the gjs-console command-line on startup
  + move gjs_error_reporter into a C++ file jsapi-private.cpp
  + don't use PTRDIFF macro from private spidermonkey header
  + Require C++
  + bgo#584558 - Need print() function
  + Enable JIT if we can, by default
  + Make things build with glib 2.16
  + Allow null/undefined to be passed in to callbacks
  + Support for callback functions
- BuildRequire gcc-c++.</changelog>
<changelog author="vuntz@novell.com" date="1251288000">- Update to version 0.4:
  + Use g_boxed methods for GValue copying/freeing
  + Add symbolic link from gjs to gjs-console in $(bindir)
  + Use gssize in gjs_string_from_utf8/gjs_string_from_filename
  + Don't use undefined variable in dbus exception
  + Add gjs_parse_args
  + Add a gettext module
  + Better toString() for introspection objects
  +  Port modules/mainloop to gjs_parse_args
  + scripts: don't hardcode path to python
  + switch DEBUG_DBUS_MARSHAL log messages to be compiled out by
    default
  + bgo#560048 - Use JS_SetPropertyAttributes to seal imports
  + autoconf-2.64 compat: Don't use $(builddir) or
    $(abs_top_builddir)
  + Fix gjs_crash_after_timeout() problems</changelog>
<changelog author="vuntz@novell.com" date="1249560000">- Build against mozilla-xulrunner191.</changelog>
<changelog author="vuntz@novell.com" date="1246968000">- Update to version 0.3:
  + DBus support
  + Support simple fields for boxed types
  + Support &quot;copy construction&quot; of boxed types
  + Support simple structures not registered as boxed
  - Allow access to nested structures
  - Allow direct assignment to nested structure fields
  - Allow enum and flag structure fields
  - Allow creating boxed wrapper without copy
  + Support for non-default constructor (i.e. constructors like
    GdkPixbuf.Pixbuf.new_from_file(file))
  + Add a Lang.bind function which binds the meaning of 'this'
  + Add an interactive console gjs-console
  + Allow code in directory modules (i.e. the code should reside in
    __init__.js files)
  + Fix handling of enum/flags return values
  + Handle non-gobject-registered flags
  + Add Tweener.registerSpecialProperty to tweener module
  + Add profiler for javascript code
  + Add gjs_context_get_all and gjs_dumpstack - useful to invoke
    from a debugger such as gdb
  + Support GHashTable
  + Add support for UNIX shebang (i.e. #!/usr/bin/gjs-console)
  + Support new introspection short/ushort type tags
  + Support GI_TYPE_TAG_FILENAME
  + Improve support for machine-dependent integer types and arrays
    of integers
  + Fix several memory leaks
  + Bugs fixed: bgo#560506, bgo#560670, bgo#560808, bgo#561514,
    bgo#561516, bgo#561849, bgo#562892, bgo#564424, bgo#564664,
    bgo#566185, bgo#567675, bgo#569178, bgo#570775, bgo#570964,
    bgo#580948, bgo#584560, bgo#584850, bgo#584858, bgo#584858,
    bgo#585386, bgo#585460, bgo#586665, bgo#586760, bgo#561203,
    bgo#561573, bgo#561585, bgo#561664, bgo#561686, bgo#561812,
    bgo#562575, bgo#565029, bgo#567078, bgo#569374, bgo#572113,
    bgo#572121, bgo#572130, bgo#572258, bgo#580865, bgo#580947,
    bgo#580957, bgo#581277, bgo#581384, bgo#581385, bgo#581389,
    bgo#582686, bgo#582704, bgo#582707, bgo#584849, bgo#560808
- Add dbus-1-glib-devel BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1241179200">- Initial package.</changelog>
</package>
<package pkgid="a7246609bf29f4031beb111aca0cd49860367620" name="libgjs0" arch="x86_64">
<version epoch="0" ver="0.7.11" rel="1.3.1"/>
<changelog author="dimstar@opensuse.org" date="1298980800">- Update to version 0.7.11:
  + Add gjs_context_maybe_gc() which is similar to JS_MaybeGC but
    tries to account for native allocations made directly from libc
    when determining if GC is useful. Also invoke after creating
    new native objects.
  + Adapt to additional xulrunner 2.0 changes
  + Add back debugger module, with single nativeTrap() function to
    trigger debugger breakpoint
  + Fix bug with looking up namespaced native modules
  + Memory leak fix
  + Build fixes
- Drop gjs-xulrunner20b11-fix.patch: fixed upstream.
- This update addresses bnc#676079.</changelog>
<changelog author="vuntz@opensuse.org" date="1298289600">- Add gjs-xulrunner20b11-fix.patch to adapt to API changes in
  latest xulrunner.</changelog>
<changelog author="vuntz@opensuse.org" date="1296129600">- Update to version 0.7.10:
  + xul2: use JS_NewCompartmentAndGlobalObject to avoid crash with
    latest xulrunner 2.
  + console: don't segfault on huge lines</changelog>
<changelog author="vuntz@opensuse.org" date="1295265600">- Update to version 0.7.9:
  + Adapt to JS_GetStringChars removal in xulrunner 2.
  + Handle wide ranging enum values better.
  + Some tests fixes.
- Add Url tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1293019200">- Update to version 0.7.8:
  + Add a js-version property the GjsContext object and also allow
    specifying a specific version via a comment of the form
    '// application/javascript;version=1.8'. If no version is
    specified, all SpiderMonkey extensions are allowed.
  + Integrate with cairo-gobject library for support of boxed
    Cairo types
  + Add support for (out caller-allocates)
  + Add support for gunichar type
  + Support signals with G_TYPE_POINTER argument using
    introspection information
  + When invoking callback for void-returning async D-Bus method
    implementations, allow empty parameter list instead of []
  + Ignore empty elements in the module search path instead of
    treating them as the current directory
  + Handle removal of JS_GetStringBytes() in Spidermonkey
  + Handle removal of JS_GetFunctionName() in Spidermonkey
  + Use new g_object_info_find_method_using_interfaces() to allow
    future caching.
  + Improve efficiency of module search
  + Fix problems with JS_Add/RemoveRoot pairing
  + Memory management fixes
  + Improve error and debugging messages
  + Build fixes
  + Bugs fixed: bgo#624811, bgo#632551, bgo#632626, bgo#632925,
    bgo#633199, bgo#633477, bgo#635359, bgo#635368, bgo#635371,
    bgo#635707, bgo#636263, bgo#636619, bgo#636927, bgo#636928,
    bgo#637246</changelog>
<changelog author="vuntz@opensuse.org" date="1291377600">- Add explicit Requires of mozilla-xulrunner%{xulrunner_ver} to
  libgjs0: the Requires on libmozjs.so is not enough, as there
  might be more than one provider, and it could be the wrong
  version of xulrunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289908800">- Update to version 0.7.7:
  + bgo#632159: Adapt to removal of SlowNative functions
  + Support more recent development versions of XulRunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289822400">- Update to version 0.7.6:
  + bgo#610859: Add makeProxyClass() function to the dbus module
    for easy creation of proxy classes.
  + Add an extra test case.
  + Build fixes.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Use pkgconfig BuildRequires when possible:
  + old BuildRequires: cairo-devel, dbus-1-glib-devel,
    gobject-introspection-devel.
  + new BuildRequires: cairo, dbus-glib-1 and
    gobject-introspection-1.0.
- Rename libgjs-0 to libgjs0: this is the correct SLPP name. Add
  appropriate Provides/Obsoletes.
- Do not add explicit Requires of dbus-1-devel and
  gobject-introspection-devel for libgjs-devel: they will be added
  automatically.
- Use %_smp_mflags, make and %make_install, following our new best
  packaging practices.</changelog>
<changelog author="vuntz@opensuse.org" date="1288267200">- Update to version 0.7.5:
  + Replace JS_SealObject by JS_FreezeObject.
  + Port all functions to JSFUN_FAST_NATIVE.
  + JS_IsNativeFrame replaced by JS_IsScriptFrame.
  + Separate &quot;basic&quot; API from &quot;embedder/module&quot;.
  + Build fixes.
- Build against mozilla-xulrunner20 in 11.4 and later, and stop
  supporting the 11.1 build (that was using mozilla-xulrunner190).</changelog>
<changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.7.4:
  + Require single include use of headers.
  + Support xulrunner 1.9.3.
  + Make gjs_profiler_reset public.
  + Remove &quot;debugger&quot; module.
  + Replace call context with a concept of &quot;current context&quot;.
  + Replace &quot;load context&quot; with a &quot;import global&quot;.
  + Various other fixes.
- Drop gjs_gi_probes.d, gjs.stp.in source files: they are now
  included in tarball.</changelog>
<changelog author="vuntz@opensuse.org" date="1284638400">- Update to version 0.7.2:
  + Fix 64 bit issues.
  + Explicitly link gjs-console against glib.
  + Update to (and require) gobject-introspection 0.9.5.
  + Various other fixes.
- Remove gir-repository Recommends: all the interesting gir files
  are now directly shipped with the libraries.</changelog>
<changelog author="vuntz@opensuse.org" date="1279886400">- Update to version 0.7.1:
  + Add support for GArray to gjs_value_from_g_argument
  + Add support for GArray to gjs_value_to_g_argument
  + Add support for dtrace/SystemTap
  + Add a promise module
  + Handle GValues of type G_TYPE_STRV
  + [gdb-check] Add a script for easier use
  + Throw a better warning for GValues containing container types
  + [importer] Allow native modules in gjs.so
  + [gjs] Add a byteArray module.
  + Adjust for g-i change to remove machine-independent type tags
  + Various other fixes.
- Drop gjs-bgo623775.patch: fixed upstream.
- Enable systemtap support: add systemtap-sdt-devel BuildRequires,
  pass --enable-systemtap to configure. Add gjs_gi_probes.d and
  gjs.stp.in source files, which are missing from the tarball
  (bgo#625090).</changelog>
<changelog author="dimstar@opensuse.org" date="1279195200">- Add gjs-bgo623775.patch, from upstream git to fix build with
  gobject-introspection 0.9.2.</changelog>
<changelog author="dimstar@opensuse.org" date="1275048000">- Update to version 0.7:
  + Add support for &quot;foreign structs&quot; - which are structures that
    are referenced from gobject-introspection, but need glue
    code to actually handle them.
  + Hook cairo bindings to integrate with gobject-introspected
    libraries using new foreign struct support
  + Start working toward thread-safety by adding
    JS_BeginRequest/JS_EndRequest calls throughout the codebase
  + add Tweener.setTimeScale and Tweener.getTimeScale
  + Wrap cairo_copy_path, cairo_copy_path_flat, and
    cairo_append_path
  + Handle destroy callbacks of type other than GDestroyNotify
  + Handle flag arguments not registered with GObject
  + Log errors that occur in callbacks
  + Code cleanup
  + Build fixes
  + Bugs fixed: bgo#610357, bgo#614055, bgo#614344, bgo#615078,
    bgo#615222, bgo#617343, bgo#617568, bgo#617702, bgo#617972,
    bgo#618190, bgo#618195, bgo#618200, bgo#618201</changelog>
<changelog author="vuntz@opensuse.org" date="1269604800">- Build against mozilla-xulrunner192-devel on openSUSE &gt; 11.2.
- Add dbus-1-devel Requires to devel package.</changelog>
<changelog author="dimstar@opensuse.org" date="1269000000">- Update to version 0.6:
  + Optimize function invocation using libffi directly, speeding up
    function invocation benchmarks by as much as 30%.
  + Add a native Cairo module
  + Don't include user_data arguments for callbacks, in Javascript
    you should use closures instead
  + Add a --command/-c argument to gjs-console
  + Add gjs_context_get_native_context() to allow access to the
    native context
  + Improve internal API support for collecting function arguments
    and defining types
  + Add examples using gio and libsoup
  + Add datadir/share/gjs-1.0 to searchpath in addition to
    XDG_DATA_DIRS
  + Add -rpath for libmozjs when linking gjs-console
  + Improve test cases and add internal assertions
  + Bugs fixed: bgo#561524, bgo#604074, bgo#604076, bgo#606258,
    bgo#609691, bgo#609830, bgo#610320, bgo#610370, bgo#610574,
    bgo#611529, bgo#611585, bgo#611590, bgo#611591, bgo#611811.
    bgo#613106
- BuildRequire cairo-devel.</changelog>
<changelog author="dimstar@opensuse.org" date="1266321600">- Update to version 0.5:
  + Add a test for DBus.getcurrentMessageContext()
  + [dbus] include service name in error messages
  + gjs_define_object_class(): generate correct object hierarchy
  + Log the gjs-console command-line on startup
  + move gjs_error_reporter into a C++ file jsapi-private.cpp
  + don't use PTRDIFF macro from private spidermonkey header
  + Require C++
  + bgo#584558 - Need print() function
  + Enable JIT if we can, by default
  + Make things build with glib 2.16
  + Allow null/undefined to be passed in to callbacks
  + Support for callback functions
- BuildRequire gcc-c++.</changelog>
<changelog author="vuntz@novell.com" date="1251288000">- Update to version 0.4:
  + Use g_boxed methods for GValue copying/freeing
  + Add symbolic link from gjs to gjs-console in $(bindir)
  + Use gssize in gjs_string_from_utf8/gjs_string_from_filename
  + Don't use undefined variable in dbus exception
  + Add gjs_parse_args
  + Add a gettext module
  + Better toString() for introspection objects
  +  Port modules/mainloop to gjs_parse_args
  + scripts: don't hardcode path to python
  + switch DEBUG_DBUS_MARSHAL log messages to be compiled out by
    default
  + bgo#560048 - Use JS_SetPropertyAttributes to seal imports
  + autoconf-2.64 compat: Don't use $(builddir) or
    $(abs_top_builddir)
  + Fix gjs_crash_after_timeout() problems</changelog>
<changelog author="vuntz@novell.com" date="1249560000">- Build against mozilla-xulrunner191.</changelog>
<changelog author="vuntz@novell.com" date="1246968000">- Update to version 0.3:
  + DBus support
  + Support simple fields for boxed types
  + Support &quot;copy construction&quot; of boxed types
  + Support simple structures not registered as boxed
  - Allow access to nested structures
  - Allow direct assignment to nested structure fields
  - Allow enum and flag structure fields
  - Allow creating boxed wrapper without copy
  + Support for non-default constructor (i.e. constructors like
    GdkPixbuf.Pixbuf.new_from_file(file))
  + Add a Lang.bind function which binds the meaning of 'this'
  + Add an interactive console gjs-console
  + Allow code in directory modules (i.e. the code should reside in
    __init__.js files)
  + Fix handling of enum/flags return values
  + Handle non-gobject-registered flags
  + Add Tweener.registerSpecialProperty to tweener module
  + Add profiler for javascript code
  + Add gjs_context_get_all and gjs_dumpstack - useful to invoke
    from a debugger such as gdb
  + Support GHashTable
  + Add support for UNIX shebang (i.e. #!/usr/bin/gjs-console)
  + Support new introspection short/ushort type tags
  + Support GI_TYPE_TAG_FILENAME
  + Improve support for machine-dependent integer types and arrays
    of integers
  + Fix several memory leaks
  + Bugs fixed: bgo#560506, bgo#560670, bgo#560808, bgo#561514,
    bgo#561516, bgo#561849, bgo#562892, bgo#564424, bgo#564664,
    bgo#566185, bgo#567675, bgo#569178, bgo#570775, bgo#570964,
    bgo#580948, bgo#584560, bgo#584850, bgo#584858, bgo#584858,
    bgo#585386, bgo#585460, bgo#586665, bgo#586760, bgo#561203,
    bgo#561573, bgo#561585, bgo#561664, bgo#561686, bgo#561812,
    bgo#562575, bgo#565029, bgo#567078, bgo#569374, bgo#572113,
    bgo#572121, bgo#572130, bgo#572258, bgo#580865, bgo#580947,
    bgo#580957, bgo#581277, bgo#581384, bgo#581385, bgo#581389,
    bgo#582686, bgo#582704, bgo#582707, bgo#584849, bgo#560808
- Add dbus-1-glib-devel BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1241179200">- Initial package.</changelog>
</package>
<package pkgid="641b120fb4e4a9f282b24aea3bf66c5465b28b56" name="gjs" arch="x86_64">
<version epoch="0" ver="0.7.11" rel="1.3.1"/>
<changelog author="dimstar@opensuse.org" date="1298980800">- Update to version 0.7.11:
  + Add gjs_context_maybe_gc() which is similar to JS_MaybeGC but
    tries to account for native allocations made directly from libc
    when determining if GC is useful. Also invoke after creating
    new native objects.
  + Adapt to additional xulrunner 2.0 changes
  + Add back debugger module, with single nativeTrap() function to
    trigger debugger breakpoint
  + Fix bug with looking up namespaced native modules
  + Memory leak fix
  + Build fixes
- Drop gjs-xulrunner20b11-fix.patch: fixed upstream.
- This update addresses bnc#676079.</changelog>
<changelog author="vuntz@opensuse.org" date="1298289600">- Add gjs-xulrunner20b11-fix.patch to adapt to API changes in
  latest xulrunner.</changelog>
<changelog author="vuntz@opensuse.org" date="1296129600">- Update to version 0.7.10:
  + xul2: use JS_NewCompartmentAndGlobalObject to avoid crash with
    latest xulrunner 2.
  + console: don't segfault on huge lines</changelog>
<changelog author="vuntz@opensuse.org" date="1295265600">- Update to version 0.7.9:
  + Adapt to JS_GetStringChars removal in xulrunner 2.
  + Handle wide ranging enum values better.
  + Some tests fixes.
- Add Url tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1293019200">- Update to version 0.7.8:
  + Add a js-version property the GjsContext object and also allow
    specifying a specific version via a comment of the form
    '// application/javascript;version=1.8'. If no version is
    specified, all SpiderMonkey extensions are allowed.
  + Integrate with cairo-gobject library for support of boxed
    Cairo types
  + Add support for (out caller-allocates)
  + Add support for gunichar type
  + Support signals with G_TYPE_POINTER argument using
    introspection information
  + When invoking callback for void-returning async D-Bus method
    implementations, allow empty parameter list instead of []
  + Ignore empty elements in the module search path instead of
    treating them as the current directory
  + Handle removal of JS_GetStringBytes() in Spidermonkey
  + Handle removal of JS_GetFunctionName() in Spidermonkey
  + Use new g_object_info_find_method_using_interfaces() to allow
    future caching.
  + Improve efficiency of module search
  + Fix problems with JS_Add/RemoveRoot pairing
  + Memory management fixes
  + Improve error and debugging messages
  + Build fixes
  + Bugs fixed: bgo#624811, bgo#632551, bgo#632626, bgo#632925,
    bgo#633199, bgo#633477, bgo#635359, bgo#635368, bgo#635371,
    bgo#635707, bgo#636263, bgo#636619, bgo#636927, bgo#636928,
    bgo#637246</changelog>
<changelog author="vuntz@opensuse.org" date="1291377600">- Add explicit Requires of mozilla-xulrunner%{xulrunner_ver} to
  libgjs0: the Requires on libmozjs.so is not enough, as there
  might be more than one provider, and it could be the wrong
  version of xulrunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289908800">- Update to version 0.7.7:
  + bgo#632159: Adapt to removal of SlowNative functions
  + Support more recent development versions of XulRunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289822400">- Update to version 0.7.6:
  + bgo#610859: Add makeProxyClass() function to the dbus module
    for easy creation of proxy classes.
  + Add an extra test case.
  + Build fixes.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Use pkgconfig BuildRequires when possible:
  + old BuildRequires: cairo-devel, dbus-1-glib-devel,
    gobject-introspection-devel.
  + new BuildRequires: cairo, dbus-glib-1 and
    gobject-introspection-1.0.
- Rename libgjs-0 to libgjs0: this is the correct SLPP name. Add
  appropriate Provides/Obsoletes.
- Do not add explicit Requires of dbus-1-devel and
  gobject-introspection-devel for libgjs-devel: they will be added
  automatically.
- Use %_smp_mflags, make and %make_install, following our new best
  packaging practices.</changelog>
<changelog author="vuntz@opensuse.org" date="1288267200">- Update to version 0.7.5:
  + Replace JS_SealObject by JS_FreezeObject.
  + Port all functions to JSFUN_FAST_NATIVE.
  + JS_IsNativeFrame replaced by JS_IsScriptFrame.
  + Separate &quot;basic&quot; API from &quot;embedder/module&quot;.
  + Build fixes.
- Build against mozilla-xulrunner20 in 11.4 and later, and stop
  supporting the 11.1 build (that was using mozilla-xulrunner190).</changelog>
<changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.7.4:
  + Require single include use of headers.
  + Support xulrunner 1.9.3.
  + Make gjs_profiler_reset public.
  + Remove &quot;debugger&quot; module.
  + Replace call context with a concept of &quot;current context&quot;.
  + Replace &quot;load context&quot; with a &quot;import global&quot;.
  + Various other fixes.
- Drop gjs_gi_probes.d, gjs.stp.in source files: they are now
  included in tarball.</changelog>
<changelog author="vuntz@opensuse.org" date="1284638400">- Update to version 0.7.2:
  + Fix 64 bit issues.
  + Explicitly link gjs-console against glib.
  + Update to (and require) gobject-introspection 0.9.5.
  + Various other fixes.
- Remove gir-repository Recommends: all the interesting gir files
  are now directly shipped with the libraries.</changelog>
<changelog author="vuntz@opensuse.org" date="1279886400">- Update to version 0.7.1:
  + Add support for GArray to gjs_value_from_g_argument
  + Add support for GArray to gjs_value_to_g_argument
  + Add support for dtrace/SystemTap
  + Add a promise module
  + Handle GValues of type G_TYPE_STRV
  + [gdb-check] Add a script for easier use
  + Throw a better warning for GValues containing container types
  + [importer] Allow native modules in gjs.so
  + [gjs] Add a byteArray module.
  + Adjust for g-i change to remove machine-independent type tags
  + Various other fixes.
- Drop gjs-bgo623775.patch: fixed upstream.
- Enable systemtap support: add systemtap-sdt-devel BuildRequires,
  pass --enable-systemtap to configure. Add gjs_gi_probes.d and
  gjs.stp.in source files, which are missing from the tarball
  (bgo#625090).</changelog>
<changelog author="dimstar@opensuse.org" date="1279195200">- Add gjs-bgo623775.patch, from upstream git to fix build with
  gobject-introspection 0.9.2.</changelog>
<changelog author="dimstar@opensuse.org" date="1275048000">- Update to version 0.7:
  + Add support for &quot;foreign structs&quot; - which are structures that
    are referenced from gobject-introspection, but need glue
    code to actually handle them.
  + Hook cairo bindings to integrate with gobject-introspected
    libraries using new foreign struct support
  + Start working toward thread-safety by adding
    JS_BeginRequest/JS_EndRequest calls throughout the codebase
  + add Tweener.setTimeScale and Tweener.getTimeScale
  + Wrap cairo_copy_path, cairo_copy_path_flat, and
    cairo_append_path
  + Handle destroy callbacks of type other than GDestroyNotify
  + Handle flag arguments not registered with GObject
  + Log errors that occur in callbacks
  + Code cleanup
  + Build fixes
  + Bugs fixed: bgo#610357, bgo#614055, bgo#614344, bgo#615078,
    bgo#615222, bgo#617343, bgo#617568, bgo#617702, bgo#617972,
    bgo#618190, bgo#618195, bgo#618200, bgo#618201</changelog>
<changelog author="vuntz@opensuse.org" date="1269604800">- Build against mozilla-xulrunner192-devel on openSUSE &gt; 11.2.
- Add dbus-1-devel Requires to devel package.</changelog>
<changelog author="dimstar@opensuse.org" date="1269000000">- Update to version 0.6:
  + Optimize function invocation using libffi directly, speeding up
    function invocation benchmarks by as much as 30%.
  + Add a native Cairo module
  + Don't include user_data arguments for callbacks, in Javascript
    you should use closures instead
  + Add a --command/-c argument to gjs-console
  + Add gjs_context_get_native_context() to allow access to the
    native context
  + Improve internal API support for collecting function arguments
    and defining types
  + Add examples using gio and libsoup
  + Add datadir/share/gjs-1.0 to searchpath in addition to
    XDG_DATA_DIRS
  + Add -rpath for libmozjs when linking gjs-console
  + Improve test cases and add internal assertions
  + Bugs fixed: bgo#561524, bgo#604074, bgo#604076, bgo#606258,
    bgo#609691, bgo#609830, bgo#610320, bgo#610370, bgo#610574,
    bgo#611529, bgo#611585, bgo#611590, bgo#611591, bgo#611811.
    bgo#613106
- BuildRequire cairo-devel.</changelog>
<changelog author="dimstar@opensuse.org" date="1266321600">- Update to version 0.5:
  + Add a test for DBus.getcurrentMessageContext()
  + [dbus] include service name in error messages
  + gjs_define_object_class(): generate correct object hierarchy
  + Log the gjs-console command-line on startup
  + move gjs_error_reporter into a C++ file jsapi-private.cpp
  + don't use PTRDIFF macro from private spidermonkey header
  + Require C++
  + bgo#584558 - Need print() function
  + Enable JIT if we can, by default
  + Make things build with glib 2.16
  + Allow null/undefined to be passed in to callbacks
  + Support for callback functions
- BuildRequire gcc-c++.</changelog>
<changelog author="vuntz@novell.com" date="1251288000">- Update to version 0.4:
  + Use g_boxed methods for GValue copying/freeing
  + Add symbolic link from gjs to gjs-console in $(bindir)
  + Use gssize in gjs_string_from_utf8/gjs_string_from_filename
  + Don't use undefined variable in dbus exception
  + Add gjs_parse_args
  + Add a gettext module
  + Better toString() for introspection objects
  +  Port modules/mainloop to gjs_parse_args
  + scripts: don't hardcode path to python
  + switch DEBUG_DBUS_MARSHAL log messages to be compiled out by
    default
  + bgo#560048 - Use JS_SetPropertyAttributes to seal imports
  + autoconf-2.64 compat: Don't use $(builddir) or
    $(abs_top_builddir)
  + Fix gjs_crash_after_timeout() problems</changelog>
<changelog author="vuntz@novell.com" date="1249560000">- Build against mozilla-xulrunner191.</changelog>
<changelog author="vuntz@novell.com" date="1246968000">- Update to version 0.3:
  + DBus support
  + Support simple fields for boxed types
  + Support &quot;copy construction&quot; of boxed types
  + Support simple structures not registered as boxed
  - Allow access to nested structures
  - Allow direct assignment to nested structure fields
  - Allow enum and flag structure fields
  - Allow creating boxed wrapper without copy
  + Support for non-default constructor (i.e. constructors like
    GdkPixbuf.Pixbuf.new_from_file(file))
  + Add a Lang.bind function which binds the meaning of 'this'
  + Add an interactive console gjs-console
  + Allow code in directory modules (i.e. the code should reside in
    __init__.js files)
  + Fix handling of enum/flags return values
  + Handle non-gobject-registered flags
  + Add Tweener.registerSpecialProperty to tweener module
  + Add profiler for javascript code
  + Add gjs_context_get_all and gjs_dumpstack - useful to invoke
    from a debugger such as gdb
  + Support GHashTable
  + Add support for UNIX shebang (i.e. #!/usr/bin/gjs-console)
  + Support new introspection short/ushort type tags
  + Support GI_TYPE_TAG_FILENAME
  + Improve support for machine-dependent integer types and arrays
    of integers
  + Fix several memory leaks
  + Bugs fixed: bgo#560506, bgo#560670, bgo#560808, bgo#561514,
    bgo#561516, bgo#561849, bgo#562892, bgo#564424, bgo#564664,
    bgo#566185, bgo#567675, bgo#569178, bgo#570775, bgo#570964,
    bgo#580948, bgo#584560, bgo#584850, bgo#584858, bgo#584858,
    bgo#585386, bgo#585460, bgo#586665, bgo#586760, bgo#561203,
    bgo#561573, bgo#561585, bgo#561664, bgo#561686, bgo#561812,
    bgo#562575, bgo#565029, bgo#567078, bgo#569374, bgo#572113,
    bgo#572121, bgo#572130, bgo#572258, bgo#580865, bgo#580947,
    bgo#580957, bgo#581277, bgo#581384, bgo#581385, bgo#581389,
    bgo#582686, bgo#582704, bgo#582707, bgo#584849, bgo#560808
- Add dbus-1-glib-devel BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1241179200">- Initial package.</changelog>
</package>
<package pkgid="95bdc0faba18bc5462d11d76c8174e3e8e2711ec" name="libgjs-devel" arch="i586">
<version epoch="0" ver="0.7.11" rel="1.3.1"/>
<changelog author="dimstar@opensuse.org" date="1298980800">- Update to version 0.7.11:
  + Add gjs_context_maybe_gc() which is similar to JS_MaybeGC but
    tries to account for native allocations made directly from libc
    when determining if GC is useful. Also invoke after creating
    new native objects.
  + Adapt to additional xulrunner 2.0 changes
  + Add back debugger module, with single nativeTrap() function to
    trigger debugger breakpoint
  + Fix bug with looking up namespaced native modules
  + Memory leak fix
  + Build fixes
- Drop gjs-xulrunner20b11-fix.patch: fixed upstream.
- This update addresses bnc#676079.</changelog>
<changelog author="vuntz@opensuse.org" date="1298289600">- Add gjs-xulrunner20b11-fix.patch to adapt to API changes in
  latest xulrunner.</changelog>
<changelog author="vuntz@opensuse.org" date="1296129600">- Update to version 0.7.10:
  + xul2: use JS_NewCompartmentAndGlobalObject to avoid crash with
    latest xulrunner 2.
  + console: don't segfault on huge lines</changelog>
<changelog author="vuntz@opensuse.org" date="1295265600">- Update to version 0.7.9:
  + Adapt to JS_GetStringChars removal in xulrunner 2.
  + Handle wide ranging enum values better.
  + Some tests fixes.
- Add Url tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1293019200">- Update to version 0.7.8:
  + Add a js-version property the GjsContext object and also allow
    specifying a specific version via a comment of the form
    '// application/javascript;version=1.8'. If no version is
    specified, all SpiderMonkey extensions are allowed.
  + Integrate with cairo-gobject library for support of boxed
    Cairo types
  + Add support for (out caller-allocates)
  + Add support for gunichar type
  + Support signals with G_TYPE_POINTER argument using
    introspection information
  + When invoking callback for void-returning async D-Bus method
    implementations, allow empty parameter list instead of []
  + Ignore empty elements in the module search path instead of
    treating them as the current directory
  + Handle removal of JS_GetStringBytes() in Spidermonkey
  + Handle removal of JS_GetFunctionName() in Spidermonkey
  + Use new g_object_info_find_method_using_interfaces() to allow
    future caching.
  + Improve efficiency of module search
  + Fix problems with JS_Add/RemoveRoot pairing
  + Memory management fixes
  + Improve error and debugging messages
  + Build fixes
  + Bugs fixed: bgo#624811, bgo#632551, bgo#632626, bgo#632925,
    bgo#633199, bgo#633477, bgo#635359, bgo#635368, bgo#635371,
    bgo#635707, bgo#636263, bgo#636619, bgo#636927, bgo#636928,
    bgo#637246</changelog>
<changelog author="vuntz@opensuse.org" date="1291377600">- Add explicit Requires of mozilla-xulrunner%{xulrunner_ver} to
  libgjs0: the Requires on libmozjs.so is not enough, as there
  might be more than one provider, and it could be the wrong
  version of xulrunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289908800">- Update to version 0.7.7:
  + bgo#632159: Adapt to removal of SlowNative functions
  + Support more recent development versions of XulRunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289822400">- Update to version 0.7.6:
  + bgo#610859: Add makeProxyClass() function to the dbus module
    for easy creation of proxy classes.
  + Add an extra test case.
  + Build fixes.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Use pkgconfig BuildRequires when possible:
  + old BuildRequires: cairo-devel, dbus-1-glib-devel,
    gobject-introspection-devel.
  + new BuildRequires: cairo, dbus-glib-1 and
    gobject-introspection-1.0.
- Rename libgjs-0 to libgjs0: this is the correct SLPP name. Add
  appropriate Provides/Obsoletes.
- Do not add explicit Requires of dbus-1-devel and
  gobject-introspection-devel for libgjs-devel: they will be added
  automatically.
- Use %_smp_mflags, make and %make_install, following our new best
  packaging practices.</changelog>
<changelog author="vuntz@opensuse.org" date="1288267200">- Update to version 0.7.5:
  + Replace JS_SealObject by JS_FreezeObject.
  + Port all functions to JSFUN_FAST_NATIVE.
  + JS_IsNativeFrame replaced by JS_IsScriptFrame.
  + Separate &quot;basic&quot; API from &quot;embedder/module&quot;.
  + Build fixes.
- Build against mozilla-xulrunner20 in 11.4 and later, and stop
  supporting the 11.1 build (that was using mozilla-xulrunner190).</changelog>
<changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.7.4:
  + Require single include use of headers.
  + Support xulrunner 1.9.3.
  + Make gjs_profiler_reset public.
  + Remove &quot;debugger&quot; module.
  + Replace call context with a concept of &quot;current context&quot;.
  + Replace &quot;load context&quot; with a &quot;import global&quot;.
  + Various other fixes.
- Drop gjs_gi_probes.d, gjs.stp.in source files: they are now
  included in tarball.</changelog>
<changelog author="vuntz@opensuse.org" date="1284638400">- Update to version 0.7.2:
  + Fix 64 bit issues.
  + Explicitly link gjs-console against glib.
  + Update to (and require) gobject-introspection 0.9.5.
  + Various other fixes.
- Remove gir-repository Recommends: all the interesting gir files
  are now directly shipped with the libraries.</changelog>
<changelog author="vuntz@opensuse.org" date="1279886400">- Update to version 0.7.1:
  + Add support for GArray to gjs_value_from_g_argument
  + Add support for GArray to gjs_value_to_g_argument
  + Add support for dtrace/SystemTap
  + Add a promise module
  + Handle GValues of type G_TYPE_STRV
  + [gdb-check] Add a script for easier use
  + Throw a better warning for GValues containing container types
  + [importer] Allow native modules in gjs.so
  + [gjs] Add a byteArray module.
  + Adjust for g-i change to remove machine-independent type tags
  + Various other fixes.
- Drop gjs-bgo623775.patch: fixed upstream.
- Enable systemtap support: add systemtap-sdt-devel BuildRequires,
  pass --enable-systemtap to configure. Add gjs_gi_probes.d and
  gjs.stp.in source files, which are missing from the tarball
  (bgo#625090).</changelog>
<changelog author="dimstar@opensuse.org" date="1279195200">- Add gjs-bgo623775.patch, from upstream git to fix build with
  gobject-introspection 0.9.2.</changelog>
<changelog author="dimstar@opensuse.org" date="1275048000">- Update to version 0.7:
  + Add support for &quot;foreign structs&quot; - which are structures that
    are referenced from gobject-introspection, but need glue
    code to actually handle them.
  + Hook cairo bindings to integrate with gobject-introspected
    libraries using new foreign struct support
  + Start working toward thread-safety by adding
    JS_BeginRequest/JS_EndRequest calls throughout the codebase
  + add Tweener.setTimeScale and Tweener.getTimeScale
  + Wrap cairo_copy_path, cairo_copy_path_flat, and
    cairo_append_path
  + Handle destroy callbacks of type other than GDestroyNotify
  + Handle flag arguments not registered with GObject
  + Log errors that occur in callbacks
  + Code cleanup
  + Build fixes
  + Bugs fixed: bgo#610357, bgo#614055, bgo#614344, bgo#615078,
    bgo#615222, bgo#617343, bgo#617568, bgo#617702, bgo#617972,
    bgo#618190, bgo#618195, bgo#618200, bgo#618201</changelog>
<changelog author="vuntz@opensuse.org" date="1269604800">- Build against mozilla-xulrunner192-devel on openSUSE &gt; 11.2.
- Add dbus-1-devel Requires to devel package.</changelog>
<changelog author="dimstar@opensuse.org" date="1269000000">- Update to version 0.6:
  + Optimize function invocation using libffi directly, speeding up
    function invocation benchmarks by as much as 30%.
  + Add a native Cairo module
  + Don't include user_data arguments for callbacks, in Javascript
    you should use closures instead
  + Add a --command/-c argument to gjs-console
  + Add gjs_context_get_native_context() to allow access to the
    native context
  + Improve internal API support for collecting function arguments
    and defining types
  + Add examples using gio and libsoup
  + Add datadir/share/gjs-1.0 to searchpath in addition to
    XDG_DATA_DIRS
  + Add -rpath for libmozjs when linking gjs-console
  + Improve test cases and add internal assertions
  + Bugs fixed: bgo#561524, bgo#604074, bgo#604076, bgo#606258,
    bgo#609691, bgo#609830, bgo#610320, bgo#610370, bgo#610574,
    bgo#611529, bgo#611585, bgo#611590, bgo#611591, bgo#611811.
    bgo#613106
- BuildRequire cairo-devel.</changelog>
<changelog author="dimstar@opensuse.org" date="1266321600">- Update to version 0.5:
  + Add a test for DBus.getcurrentMessageContext()
  + [dbus] include service name in error messages
  + gjs_define_object_class(): generate correct object hierarchy
  + Log the gjs-console command-line on startup
  + move gjs_error_reporter into a C++ file jsapi-private.cpp
  + don't use PTRDIFF macro from private spidermonkey header
  + Require C++
  + bgo#584558 - Need print() function
  + Enable JIT if we can, by default
  + Make things build with glib 2.16
  + Allow null/undefined to be passed in to callbacks
  + Support for callback functions
- BuildRequire gcc-c++.</changelog>
<changelog author="vuntz@novell.com" date="1251288000">- Update to version 0.4:
  + Use g_boxed methods for GValue copying/freeing
  + Add symbolic link from gjs to gjs-console in $(bindir)
  + Use gssize in gjs_string_from_utf8/gjs_string_from_filename
  + Don't use undefined variable in dbus exception
  + Add gjs_parse_args
  + Add a gettext module
  + Better toString() for introspection objects
  +  Port modules/mainloop to gjs_parse_args
  + scripts: don't hardcode path to python
  + switch DEBUG_DBUS_MARSHAL log messages to be compiled out by
    default
  + bgo#560048 - Use JS_SetPropertyAttributes to seal imports
  + autoconf-2.64 compat: Don't use $(builddir) or
    $(abs_top_builddir)
  + Fix gjs_crash_after_timeout() problems</changelog>
<changelog author="vuntz@novell.com" date="1249560000">- Build against mozilla-xulrunner191.</changelog>
<changelog author="vuntz@novell.com" date="1246968000">- Update to version 0.3:
  + DBus support
  + Support simple fields for boxed types
  + Support &quot;copy construction&quot; of boxed types
  + Support simple structures not registered as boxed
  - Allow access to nested structures
  - Allow direct assignment to nested structure fields
  - Allow enum and flag structure fields
  - Allow creating boxed wrapper without copy
  + Support for non-default constructor (i.e. constructors like
    GdkPixbuf.Pixbuf.new_from_file(file))
  + Add a Lang.bind function which binds the meaning of 'this'
  + Add an interactive console gjs-console
  + Allow code in directory modules (i.e. the code should reside in
    __init__.js files)
  + Fix handling of enum/flags return values
  + Handle non-gobject-registered flags
  + Add Tweener.registerSpecialProperty to tweener module
  + Add profiler for javascript code
  + Add gjs_context_get_all and gjs_dumpstack - useful to invoke
    from a debugger such as gdb
  + Support GHashTable
  + Add support for UNIX shebang (i.e. #!/usr/bin/gjs-console)
  + Support new introspection short/ushort type tags
  + Support GI_TYPE_TAG_FILENAME
  + Improve support for machine-dependent integer types and arrays
    of integers
  + Fix several memory leaks
  + Bugs fixed: bgo#560506, bgo#560670, bgo#560808, bgo#561514,
    bgo#561516, bgo#561849, bgo#562892, bgo#564424, bgo#564664,
    bgo#566185, bgo#567675, bgo#569178, bgo#570775, bgo#570964,
    bgo#580948, bgo#584560, bgo#584850, bgo#584858, bgo#584858,
    bgo#585386, bgo#585460, bgo#586665, bgo#586760, bgo#561203,
    bgo#561573, bgo#561585, bgo#561664, bgo#561686, bgo#561812,
    bgo#562575, bgo#565029, bgo#567078, bgo#569374, bgo#572113,
    bgo#572121, bgo#572130, bgo#572258, bgo#580865, bgo#580947,
    bgo#580957, bgo#581277, bgo#581384, bgo#581385, bgo#581389,
    bgo#582686, bgo#582704, bgo#582707, bgo#584849, bgo#560808
- Add dbus-1-glib-devel BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1241179200">- Initial package.</changelog>
</package>
<package pkgid="5c352a1d5e8f438dbc8c2ae3985af166beaeb311" name="gjs" arch="src">
<version epoch="0" ver="0.7.11" rel="1.3.1"/>
<changelog author="dimstar@opensuse.org" date="1298980800">- Update to version 0.7.11:
  + Add gjs_context_maybe_gc() which is similar to JS_MaybeGC but
    tries to account for native allocations made directly from libc
    when determining if GC is useful. Also invoke after creating
    new native objects.
  + Adapt to additional xulrunner 2.0 changes
  + Add back debugger module, with single nativeTrap() function to
    trigger debugger breakpoint
  + Fix bug with looking up namespaced native modules
  + Memory leak fix
  + Build fixes
- Drop gjs-xulrunner20b11-fix.patch: fixed upstream.
- This update addresses bnc#676079.</changelog>
<changelog author="vuntz@opensuse.org" date="1298289600">- Add gjs-xulrunner20b11-fix.patch to adapt to API changes in
  latest xulrunner.</changelog>
<changelog author="vuntz@opensuse.org" date="1296129600">- Update to version 0.7.10:
  + xul2: use JS_NewCompartmentAndGlobalObject to avoid crash with
    latest xulrunner 2.
  + console: don't segfault on huge lines</changelog>
<changelog author="vuntz@opensuse.org" date="1295265600">- Update to version 0.7.9:
  + Adapt to JS_GetStringChars removal in xulrunner 2.
  + Handle wide ranging enum values better.
  + Some tests fixes.
- Add Url tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1293019200">- Update to version 0.7.8:
  + Add a js-version property the GjsContext object and also allow
    specifying a specific version via a comment of the form
    '// application/javascript;version=1.8'. If no version is
    specified, all SpiderMonkey extensions are allowed.
  + Integrate with cairo-gobject library for support of boxed
    Cairo types
  + Add support for (out caller-allocates)
  + Add support for gunichar type
  + Support signals with G_TYPE_POINTER argument using
    introspection information
  + When invoking callback for void-returning async D-Bus method
    implementations, allow empty parameter list instead of []
  + Ignore empty elements in the module search path instead of
    treating them as the current directory
  + Handle removal of JS_GetStringBytes() in Spidermonkey
  + Handle removal of JS_GetFunctionName() in Spidermonkey
  + Use new g_object_info_find_method_using_interfaces() to allow
    future caching.
  + Improve efficiency of module search
  + Fix problems with JS_Add/RemoveRoot pairing
  + Memory management fixes
  + Improve error and debugging messages
  + Build fixes
  + Bugs fixed: bgo#624811, bgo#632551, bgo#632626, bgo#632925,
    bgo#633199, bgo#633477, bgo#635359, bgo#635368, bgo#635371,
    bgo#635707, bgo#636263, bgo#636619, bgo#636927, bgo#636928,
    bgo#637246</changelog>
<changelog author="vuntz@opensuse.org" date="1291377600">- Add explicit Requires of mozilla-xulrunner%{xulrunner_ver} to
  libgjs0: the Requires on libmozjs.so is not enough, as there
  might be more than one provider, and it could be the wrong
  version of xulrunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289908800">- Update to version 0.7.7:
  + bgo#632159: Adapt to removal of SlowNative functions
  + Support more recent development versions of XulRunner.</changelog>
<changelog author="dimstar@opensuse.org" date="1289822400">- Update to version 0.7.6:
  + bgo#610859: Add makeProxyClass() function to the dbus module
    for easy creation of proxy classes.
  + Add an extra test case.
  + Build fixes.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Use pkgconfig BuildRequires when possible:
  + old BuildRequires: cairo-devel, dbus-1-glib-devel,
    gobject-introspection-devel.
  + new BuildRequires: cairo, dbus-glib-1 and
    gobject-introspection-1.0.
- Rename libgjs-0 to libgjs0: this is the correct SLPP name. Add
  appropriate Provides/Obsoletes.
- Do not add explicit Requires of dbus-1-devel and
  gobject-introspection-devel for libgjs-devel: they will be added
  automatically.
- Use %_smp_mflags, make and %make_install, following our new best
  packaging practices.</changelog>
<changelog author="vuntz@opensuse.org" date="1288267200">- Update to version 0.7.5:
  + Replace JS_SealObject by JS_FreezeObject.
  + Port all functions to JSFUN_FAST_NATIVE.
  + JS_IsNativeFrame replaced by JS_IsScriptFrame.
  + Separate &quot;basic&quot; API from &quot;embedder/module&quot;.
  + Build fixes.
- Build against mozilla-xulrunner20 in 11.4 and later, and stop
  supporting the 11.1 build (that was using mozilla-xulrunner190).</changelog>
<changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.7.4:
  + Require single include use of headers.
  + Support xulrunner 1.9.3.
  + Make gjs_profiler_reset public.
  + Remove &quot;debugger&quot; module.
  + Replace call context with a concept of &quot;current context&quot;.
  + Replace &quot;load context&quot; with a &quot;import global&quot;.
  + Various other fixes.
- Drop gjs_gi_probes.d, gjs.stp.in source files: they are now
  included in tarball.</changelog>
<changelog author="vuntz@opensuse.org" date="1284638400">- Update to version 0.7.2:
  + Fix 64 bit issues.
  + Explicitly link gjs-console against glib.
  + Update to (and require) gobject-introspection 0.9.5.
  + Various other fixes.
- Remove gir-repository Recommends: all the interesting gir files
  are now directly shipped with the libraries.</changelog>
<changelog author="vuntz@opensuse.org" date="1279886400">- Update to version 0.7.1:
  + Add support for GArray to gjs_value_from_g_argument
  + Add support for GArray to gjs_value_to_g_argument
  + Add support for dtrace/SystemTap
  + Add a promise module
  + Handle GValues of type G_TYPE_STRV
  + [gdb-check] Add a script for easier use
  + Throw a better warning for GValues containing container types
  + [importer] Allow native modules in gjs.so
  + [gjs] Add a byteArray module.
  + Adjust for g-i change to remove machine-independent type tags
  + Various other fixes.
- Drop gjs-bgo623775.patch: fixed upstream.
- Enable systemtap support: add systemtap-sdt-devel BuildRequires,
  pass --enable-systemtap to configure. Add gjs_gi_probes.d and
  gjs.stp.in source files, which are missing from the tarball
  (bgo#625090).</changelog>
<changelog author="dimstar@opensuse.org" date="1279195200">- Add gjs-bgo623775.patch, from upstream git to fix build with
  gobject-introspection 0.9.2.</changelog>
<changelog author="dimstar@opensuse.org" date="1275048000">- Update to version 0.7:
  + Add support for &quot;foreign structs&quot; - which are structures that
    are referenced from gobject-introspection, but need glue
    code to actually handle them.
  + Hook cairo bindings to integrate with gobject-introspected
    libraries using new foreign struct support
  + Start working toward thread-safety by adding
    JS_BeginRequest/JS_EndRequest calls throughout the codebase
  + add Tweener.setTimeScale and Tweener.getTimeScale
  + Wrap cairo_copy_path, cairo_copy_path_flat, and
    cairo_append_path
  + Handle destroy callbacks of type other than GDestroyNotify
  + Handle flag arguments not registered with GObject
  + Log errors that occur in callbacks
  + Code cleanup
  + Build fixes
  + Bugs fixed: bgo#610357, bgo#614055, bgo#614344, bgo#615078,
    bgo#615222, bgo#617343, bgo#617568, bgo#617702, bgo#617972,
    bgo#618190, bgo#618195, bgo#618200, bgo#618201</changelog>
<changelog author="vuntz@opensuse.org" date="1269604800">- Build against mozilla-xulrunner192-devel on openSUSE &gt; 11.2.
- Add dbus-1-devel Requires to devel package.</changelog>
<changelog author="dimstar@opensuse.org" date="1269000000">- Update to version 0.6:
  + Optimize function invocation using libffi directly, speeding up
    function invocation benchmarks by as much as 30%.
  + Add a native Cairo module
  + Don't include user_data arguments for callbacks, in Javascript
    you should use closures instead
  + Add a --command/-c argument to gjs-console
  + Add gjs_context_get_native_context() to allow access to the
    native context
  + Improve internal API support for collecting function arguments
    and defining types
  + Add examples using gio and libsoup
  + Add datadir/share/gjs-1.0 to searchpath in addition to
    XDG_DATA_DIRS
  + Add -rpath for libmozjs when linking gjs-console
  + Improve test cases and add internal assertions
  + Bugs fixed: bgo#561524, bgo#604074, bgo#604076, bgo#606258,
    bgo#609691, bgo#609830, bgo#610320, bgo#610370, bgo#610574,
    bgo#611529, bgo#611585, bgo#611590, bgo#611591, bgo#611811.
    bgo#613106
- BuildRequire cairo-devel.</changelog>
<changelog author="dimstar@opensuse.org" date="1266321600">- Update to version 0.5:
  + Add a test for DBus.getcurrentMessageContext()
  + [dbus] include service name in error messages
  + gjs_define_object_class(): generate correct object hierarchy
  + Log the gjs-console command-line on startup
  + move gjs_error_reporter into a C++ file jsapi-private.cpp
  + don't use PTRDIFF macro from private spidermonkey header
  + Require C++
  + bgo#584558 - Need print() function
  + Enable JIT if we can, by default
  + Make things build with glib 2.16
  + Allow null/undefined to be passed in to callbacks
  + Support for callback functions
- BuildRequire gcc-c++.</changelog>
<changelog author="vuntz@novell.com" date="1251288000">- Update to version 0.4:
  + Use g_boxed methods for GValue copying/freeing
  + Add symbolic link from gjs to gjs-console in $(bindir)
  + Use gssize in gjs_string_from_utf8/gjs_string_from_filename
  + Don't use undefined variable in dbus exception
  + Add gjs_parse_args
  + Add a gettext module
  + Better toString() for introspection objects
  +  Port modules/mainloop to gjs_parse_args
  + scripts: don't hardcode path to python
  + switch DEBUG_DBUS_MARSHAL log messages to be compiled out by
    default
  + bgo#560048 - Use JS_SetPropertyAttributes to seal imports
  + autoconf-2.64 compat: Don't use $(builddir) or
    $(abs_top_builddir)
  + Fix gjs_crash_after_timeout() problems</changelog>
<changelog author="vuntz@novell.com" date="1249560000">- Build against mozilla-xulrunner191.</changelog>
<changelog author="vuntz@novell.com" date="1246968000">- Update to version 0.3:
  + DBus support
  + Support simple fields for boxed types
  + Support &quot;copy construction&quot; of boxed types
  + Support simple structures not registered as boxed
  - Allow access to nested structures
  - Allow direct assignment to nested structure fields
  - Allow enum and flag structure fields
  - Allow creating boxed wrapper without copy
  + Support for non-default constructor (i.e. constructors like
    GdkPixbuf.Pixbuf.new_from_file(file))
  + Add a Lang.bind function which binds the meaning of 'this'
  + Add an interactive console gjs-console
  + Allow code in directory modules (i.e. the code should reside in
    __init__.js files)
  + Fix handling of enum/flags return values
  + Handle non-gobject-registered flags
  + Add Tweener.registerSpecialProperty to tweener module
  + Add profiler for javascript code
  + Add gjs_context_get_all and gjs_dumpstack - useful to invoke
    from a debugger such as gdb
  + Support GHashTable
  + Add support for UNIX shebang (i.e. #!/usr/bin/gjs-console)
  + Support new introspection short/ushort type tags
  + Support GI_TYPE_TAG_FILENAME
  + Improve support for machine-dependent integer types and arrays
    of integers
  + Fix several memory leaks
  + Bugs fixed: bgo#560506, bgo#560670, bgo#560808, bgo#561514,
    bgo#561516, bgo#561849, bgo#562892, bgo#564424, bgo#564664,
    bgo#566185, bgo#567675, bgo#569178, bgo#570775, bgo#570964,
    bgo#580948, bgo#584560, bgo#584850, bgo#584858, bgo#584858,
    bgo#585386, bgo#585460, bgo#586665, bgo#586760, bgo#561203,
    bgo#561573, bgo#561585, bgo#561664, bgo#561686, bgo#561812,
    bgo#562575, bgo#565029, bgo#567078, bgo#569374, bgo#572113,
    bgo#572121, bgo#572130, bgo#572258, bgo#580865, bgo#580947,
    bgo#580957, bgo#581277, bgo#581384, bgo#581385, bgo#581389,
    bgo#582686, bgo#582704, bgo#582707, bgo#584849, bgo#560808
- Add dbus-1-glib-devel BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1241179200">- Initial package.</changelog>
</package>
<package pkgid="ed778bb958f5689538eec7fa35faf7099b62fdd0" name="mozilla-js192" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="8d0bfa2094b8cbd94e0231b603fa5e92c1530db0" name="mozilla-xulrunner192-gnome-32bit" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="0ec3fe01daf2310503ecfce9ea25d1a5831a2a43" name="mozilla-xulrunner192-gnome" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="a7293b3cbf3f993e0e47d535b2f626389b232594" name="mozilla-xulrunner192-translations-common" arch="i586">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="9887415108fbaf8d8443fa5d8bb2e8018e701c43" name="mozilla-xulrunner192" arch="i586">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="76fcb020cce1f28e0322ffad876c24d759203230" name="mozilla-xulrunner192-translations-common-32bit" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="4b935d3a589ff5962866a6b0fd5b7edf29c7a493" name="mozilla-xulrunner192-translations-common" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="84999cf05f395297745958a500136a8ea35d0925" name="mozilla-xulrunner192-32bit" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="015b4273b4a3eb0dbcbe5f29e0dcca01b268c74d" name="mozilla-xulrunner192" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="760255b6f0cfadeb56d80b29e562cfbcb61b957c" name="mozilla-js192-32bit" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="e4ca397a3ce0d57adc949323e6e2f5b17a684be5" name="mozilla-xulrunner192-devel" arch="i586">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="96e43f39be61376661e77d39d459d8623f8a8a75" name="mozilla-xulrunner192-devel" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="686d84878ce249208cfb1ef4cf6e0b00b926ce93" name="mozilla-xulrunner192-buildsymbols" arch="i586">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="8b298ff712f215fbca9c81bacf653fcf4f22259c" name="mozilla-js192" arch="i586">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="42d1e9d859a6f9949e0843e526468e61a4000867" name="mozilla-xulrunner192" arch="src">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="7b2132878bfd804c5b078a581d333a676654bf2d" name="mozilla-xulrunner192-buildsymbols" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="f3e47a3e80907138bdac9ebfb9339c892889a700" name="mozilla-xulrunner192-translations-other" arch="i586">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="1a05352afae6a4416c40588f1ed8ee8207d66a13" name="mozilla-xulrunner192-gnome" arch="i586">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="15be21c03426d9edb17b1b0ff0e59b2077e2db5d" name="mozilla-xulrunner192-translations-other-32bit" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="6807c424f1ba734aaa9800b7a3a7fce029b1e528" name="mozilla-xulrunner192-translations-other" arch="x86_64">
<version epoch="0" ver="1.9.2.15" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1299240000">- update to 1.9.2.15
  * fix a regression introduced with previous update affecting
    Java applet integration (bmo#629030)</changelog>
<changelog author="pcerny@novell.com" date="1299067200">- use full path to the ntlm_auth binary (bmo#634334)
  (mozilla-ntlm-full-path.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1298376000">- security update to 1.9.2.14 (build3) (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to 1.9.2.13 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to 1.9.2.12 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion
- ignore empty LANGUAGE environment variable (bnc#648854)</changelog>
<changelog author="wr@rosenauer.org" date="1286366400">- security update to 1.9.2.11 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
- removed upstreamed patches:
  * mozilla-esd.patch
  * mozilla-helper-app.patch
- build and runtime requirement is NSS 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 1.9.2.10
  * fixing startup topcrash (bmo#594699)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- security update to 1.9.2.9 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-59/CVE-2010-2762 (bmo#584180)
    SJOW creates scope chains ending in outer object
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- honor LANGUAGE environment variable for UI locale (bmo#583793)
- fixed compilation against NSPR &lt; 4.8.6 (mozilla-prlog.patch)
  (bmo#567620)</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build with latest Gnome in Factory
  (mozilla-gdk-pixbuf.patch</changelog>
<changelog author="wr@rosenauer.org" date="1280318400">- fixed sound notifications through libesd (bmo#579877)
- updated libproxy implementation after upstream review (bmo#517655)
- added lcd filter patch for internal cairo</changelog>
<changelog author="meissner@suse.de" date="1280232000">- disable ipc and crashreport for ia64,ppc,ppc64,s390,s390x.</changelog>
<changelog author="wr@rosenauer.org" date="1279972800">- security update to 1.9.2.8 (bnc#622506)
  * MFSA 2010-48/CVE-2010-2755 (bmo#575836)
    Dangling pointer crash regression from plugin parameter array
    fix</changelog>
<changelog author="wr@rosenauer.org" date="1279195200">- security update to 1.9.2.7 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-38/CVE-2010-1215 (bmo#567069)
    Arbitrary code execution using SJOW and fast native function
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-43/CVE-2010-1207 (bmo#571287)
    Same-origin bypass using canvas context
  * MFSA 2010-44/CVE-2010-1210 (bmo#564679)
    Characters mapped to U+FFFD in 8 bit encodings cause subsequent
    character to vanish
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1277640000">- update to 1.9.2.6 release
  * modifies the crash protection feature to increase the amount
    of time that plugins are allowed to be non-responsive before
    being terminated.
- require exact matching version of mozilla-js192</changelog>
<changelog author="wr@rosenauer.org" date="1277294400">- update to final 1.9.2.4 release (bnc#603356)
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.2.4)
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1275912000">- update to 1.9.2.4(build6)</changelog>
<changelog author="wr@rosenauer.org" date="1272974400">- security update to 1.9.2.4 (Lorentz)
  * enable crashreporter also for x86-64
  * provide mozilla-runtime to host NPAPI out of process plugins
- removed libproxy debug message (bnc#604711)</changelog>
<changelog author="wr@rosenauer.org" date="1272283200">- point alternatives link to the stable version to improve
  robustness (bnc#589037)</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="wr@rosenauer.org" date="1270123200">- security update to 1.9.2.3
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion</changelog>
<changelog author="wr@rosenauer.org" date="1269518400">- security update to 1.9.2.2 (bnc#586567)
  * MFSA 2010-08/CVE-2010-1028
    WOFF heap corruption due to integer overflow
  * MFSA 2010-09/CVE-2010-0164 (bmo#547143)
    Deleted frame reuse in multipart/x-mixed-replace image
  * MFSA 2010-10/CVE-2010-0170 (bmo#541530)
    XSS via plugins and unprotected Location object
  * MFSA 2010-11/CVE-2010-0165/CVE-2010-0166/CVE-2010-0167
    Crashes with evidence of memory corruption
  * MFSA 2010-12/CVE-2010-0171 (bmo#531364)
    XSS using addEventListener and setTimeout on a wrapped object
  * MFSA 2010-13/CVE-2010-0168 (bmo#540642)
    Content policy bypass with image preloading
  * MFSA 2010-14/CVE-2010-0169 (bmo#535806)
    Browser chrome defacement via cached XUL stylesheets
  * MFSA 2010-15/CVE-2010-0172 (bmo#537862)
    Asynchronous Auth Prompt attaches to wrong window
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy
- general.useragent.locale in profile overrides
  intl.locale.matchOS (bmo#542999)
- split mozilla-js192 package which contains libmozjs only
  to allow its installation w/o all GUI dependencies</changelog>
<changelog author="wr@rosenauer.org" date="1263816000">- update to 1.9.2rc2
- add update-alternatives %ghost file to filelist starting
  with 11.2 (%ghost files are conflicting in earlier versions)
- fixed mozilla-plugin.pc (remove obsolete stable reference)</changelog>
<changelog author="wr@rosenauer.org" date="1262779200">- update to 1.9.2rc1
  * removed obsolete mozilla-breakpad.patch
- expand -translations-* and -gnome filelists to clean up the
  filesystem for upgrades and removals correctly
- enable crashreporter and create breakpad buildsymbols package
  for mozilla crashreporter (for ix86)
- drop PreReq usage by cleaning up the different Requires tags</changelog>
<changelog author="wr@rosenauer.org" date="1261656000">- update to 1.9.2b5
- removed upstreamed mozilla-abi.patch
- integrated mozilla-kde.patch
- use .autoreg file for autoregistration when needed (bnc#440872)
- enable libproxy support from 11.2 on
- renamed -gnomevfs subpackage to -gnome
- readded lockdown patches and preferences
- fix baselibs.conf</changelog>
<changelog author="wr@rosenauer.org" date="1257854400">- update to 1.9.2b2
- merge from xulrunner191 package</changelog>
<changelog author="wr@rosenauer.org" date="1257076800">- update to 1.9.2b1
- use newer internal cairo for 11.1 and older</changelog>
<changelog author="wr@rosenauer.org" date="1255867200">- reworked PreReq list</changelog>
<changelog author="wr@rosenauer.org" date="1255694400">- update to snapshot 1.9.2b2pre (20091015)
  (entering beta phase)</changelog>
<changelog author="wr@rosenauer.org" date="1253534400">- BuildRequire libiw-devel instead of wireless-tools from 11.2 on</changelog>
<changelog author="wr@rosenauer.org" date="1253102400">- new snapshot (20090916)</changelog>
<changelog author="wr@rosenauer.org" date="1251115200">- first alpha package of XULRunner 1.9.2</changelog>
</package>
<package pkgid="caa96cb35ad830f1235e1f41a152193e4a67c56e" name="seamonkey" arch="i586">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="c1cc54df09aa419f17acb0305189cd890cd7e83a" name="seamonkey-irc" arch="x86_64">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="8c4a8fd96941b8571a7333c4b38361ba5f114485" name="seamonkey-irc" arch="i586">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="85f0a872a13d6986f58300c9487209c7f90779a3" name="seamonkey-venkman" arch="x86_64">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="9d9b04923abf9e0a4082040a15da53f964b81dc2" name="seamonkey-translations-common" arch="x86_64">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="1f5a45ad86933df52546f627aef6fb373e7c092d" name="seamonkey-translations-common" arch="i586">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="202ac222b6edce5eb117183126e3c317f77b4973" name="seamonkey-translations-other" arch="x86_64">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="b4cf926306eb5678e21975acacf7eb2779237c1d" name="seamonkey-venkman" arch="i586">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="034637bdab911edaf7ae4c2e563a69ea988cf690" name="seamonkey" arch="x86_64">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="6cf551f9688d729c93d797c9f0d15af782f3f0f4" name="seamonkey-dom-inspector" arch="i586">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="8c78f349ad2a5ee04ef3a7e37e7aee548a96288f" name="seamonkey-dom-inspector" arch="x86_64">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="adeab6591323cb8daca770bc5bdb47021c9aef53" name="seamonkey" arch="src">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
<changelog author="hfiguiere@suse.de" date="1229515200">- Review and approve changes.</changelog>
<changelog author="wr@rosenauer.org" date="1229342400">- update to security release 1.1.14 (bnc#455804)
  for details:
  http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html</changelog>
<changelog author="maw@suse.de" date="1226923200">- Review and approve changes.</changelog>
<changelog author="wr@rosenauer.org" date="1226404800">- update to security release 1.1.13 (bnc#439841)
  for details:
  http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html
- fixed desktop file syntax and another rpmlint complaint</changelog>
<changelog author="maw@suse.de" date="1224072000">- Review and approve changes.</changelog>
<changelog author="wr@rosenauer.org" date="1222171200">- update to security release 1.1.12 (bnc#429179)
  for details:
  http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html
- merged Factoy and mozilla versions (again)</changelog>
<changelog author="mauro@suse.de" date="1220616000">- Update to Seamonkey 1.1.11 [bnc#407573, bnc#416147]
  for details:
  http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html
- update enigmail to 0.95.7</changelog>
<changelog author="schwab@suse.de" date="1210939200">- Remove unused includes.</changelog>
<changelog author="maw@suse.de" date="1207742400">- Merge changes and fixes from the build service.</changelog>
<changelog author="maw@suse.de" date="1207137600">- Security update to version 1.1.9 (bnc#370353):
  + MFSA 2008-19/CVE-2008-1241:  XUL popup spoofing variant
    (cross-tab popups)
  + MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket
    connection to any local port via LiveConnect
  + MFSA 2008-17/CVE-2007-4879: Privacy issue with SSL Client
    Authentication
  + MFSA 2008-16/CVE-2008-1238: HTTP Referrer spoofing with
    malformed URLs
  + MFSA 2008-15/CVE-2008-1236 and CVE-2008-1237: Crashes with
    evidence of memory corruption (rv:1.8.1.13)
  + MFSA 2008-14/CVE-2008-1233, CVE-2008-1234, and CVE-2008-1235:
    JavaScript privilege escalation and arbitrary code execution
- Respin abuild.patch.</changelog>
<changelog author="maw@suse.de" date="1206360000">- Add mozilla-missing-decl.patch, which is necessary when building
  against new versions of mozilla-nss (bmo#399589).</changelog>
<changelog author="maw@suse.de" date="1202731200">- Security update to version 1.1.8 (bnc#354469) (thanks, Wolfgang)
  + MFSA 2008-10/CVE-2008-0593  URL token stealing via stylesheet
    redirect
  + MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain
    text files
  + MFSA 2008-06/CVE-2008-0419 Web browsing history and forward
    navigation stealing
  + MFSA 2008-05/CVE-2008-0418 Directory traversal via chrome:
    URI
  + MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS, Remote
    Code Execution
  + MFSA 2008-02/CVE-2008-0414 Multiple file input focus stealing
    vulnerabilities
  + MFSA 2008-01/CVE-2008-0412 Crashes with evidence of memory
    corruption (rv:1.8.1.12)
- Update enigmail to version 0.95.6.</changelog>
<changelog author="maw@suse.de" date="1200571200">- Add mozilla-maxpathlen.patch (#354150 and bmo #412610).</changelog>
<changelog author="maw@suse.de" date="1194955200">- Add seamonkey-gcc4.3-fixes.patch.</changelog>
<changelog author="maw@suse.de" date="1192795200">- security update to version 1.1.5 (#332512) (thanks, Wolfgang)
  * MFSA 2007-29 Crashes with evidence of memory corruption
  * MFSA 2007-30 onUnload Tailgating
  * MFSA 2007-31 Digest authentication request splitting
  * MFSA 2007-32 File input focus stealing vulnerability
  * MFSA 2007-33 XUL pages can hide the window titlebar
  * MFSA 2007-34 Possible file stealing through sftp protocol
  * MFSA 2007-35 XPCNativeWraper pollution using Script object
  complete advisories on
  http://www.mozilla.org/projects/security/known-vulnerabilities.html</changelog>
<changelog author="cthiel@suse.de" date="1189684800">- recommend gpg instead of requireing fixed paths</changelog>
<changelog author="maw@suse.de" date="1189598400">- Added GPG/pinentry requirements (#309160)
- Don't run %fdupes on directories where multiple partitions
  are liable to be mounted.</changelog>
<changelog author="maw@suse.de" date="1188820800">- Correct releasedate.</changelog>
<changelog author="maw@suse.de" date="1187697600">- Merge recent changes from the build service (thanks, Wolfgang):
  + Update to security release 1.1.4:
  * MFSA 2007-26  Privilege escalation through chrome-loaded
    about:blank windows
  * MFSA 2007-27  Unescaped URIs passed to external programs
    (only relevant on Windows)
  + Add gnome-vfs.patch to be able to use helper apps with parameters
  + Update enigmail to version 0.95.3
  + Fixed unreadable GIF in the LEO searchplugin
- Use %fdupes.</changelog>
<changelog author="aj@suse.de" date="1187697600">- Use openSUSE instead of SUSE Linux as bookmark.</changelog>
<changelog author="maw@suse.de" date="1187179200">- On x86_64, s390, and s390x, deactivate the hidden visibility
  support, thereby fixing the build.</changelog>
<changelog author="adrian@suse.de" date="1182427200">- fix changelog entry order</changelog>
<changelog author="maw@suse.de" date="1182340800">- Don't hardcode /tmp anywhere; use %{_tmppath} instead.</changelog>
<changelog author="maw@suse.de" date="1182254400">- Merge updates to version 1.1.2 and enigmail version 0.95.0 from
  the build service (thanks, Wolfgang)
- Don't build as root
- Add unzip as a build requirement.</changelog>
<changelog author="sbrabec@suse.cz" date="1181217600">- Removed invalid desktop Category &quot;Application&quot; (#254654).</changelog>
<changelog author="stbinner@suse.de" date="1178107200">- install .desktop files into /usr/share/applications</changelog>
<changelog author="mkoenig@suse.de" date="1166616000">- fix build</changelog>
<changelog author="mkoenig@suse.de" date="1163678400">- update to CVS version 20061107 from buildservice [#221676]</changelog>
<changelog author="sbrabec@suse.cz" date="1163592000">- Fixed Requires/Provides correctly (#216100#c14).</changelog>
<changelog author="sbrabec@suse.cz" date="1162555200">- Do not provide and require internal libraries (#216100).
- Use safer place for build-temporary files.</changelog>
<changelog author="aj@suse.de" date="1161432000">- from openSUSE Buildservice (thanks Wolfgang Rosenauer):
  * update to SeaMonkey 1.1a-20060907
  * update enigmail to 0.94.1:  Added support for signing
    attachments with inline-PGP</changelog>
<changelog author="stark@suse.de" date="1158062400">- update to security/stability release 1.0.5
- removed libaoss usage because it's too fragile</changelog>
<changelog author="stark@suse.de" date="1154865600">- update enigmail to 0.94.1
  * Added support for signing attachments with inline-PGP</changelog>
<changelog author="aj@suse.de" date="1154865600">- Fix build (remove wrong extern &quot;C&quot;).</changelog>
<changelog author="stark@suse.de" date="1154174400">- update to 1.0.4 fixing a major regression in 1.0.3 (#195402)</changelog>
<changelog author="stark@suse.de" date="1154001600">- update to security release 1.0.3 (#195043)
- fix overwrite confirmation for GTK filesaver (#179531)
- fixed printing crash if the last used printer is not available
  anymore (#187013)</changelog>
<changelog author="stark@suse.de" date="1149249600">- update to security/stability release 1.0.2 (#179011)
  (http://www.mozilla.org/projects/security/known-vulnerabilities.html#SeaMonkey)</changelog>
<changelog author="stark@suse.de" date="1147608000">- update to version 1.0.1+
- save printer settings properly (#174082, bmo #324072)</changelog>
<changelog author="stark@suse.de" date="1145966400">- added patch for iframe crash (#169039, bmo #334515)
- improved postscript output (bmo #334485)
- changed defaults for printer properties (#6534)
- get available paper sizes from CUPS (#65482)
- fixed memory leak in clipboard caching (bmo #289897)</changelog>
<changelog author="stark@suse.de" date="1142510400">- added seamonkey icon to filelist and use it for mail and composer
  component as well for now (#158556)
- also provide the old mozilla packagenames for correct upgrade</changelog>
<changelog author="stark@suse.de" date="1142337600">- added Khmer (km-*) to pango locales (#157397)
- yet another set of upstream fixes (#148876)</changelog>
<changelog author="stark@suse.de" date="1141473600">- fixed plugin inclusion if started from Thunderbird (#151614)
- fixed crash with multipart JPEGs (bmo #328684) (#140416)
- implemented mail alert notification (bmo #327613)
- get latest security related fixes from upstream (#148876)
- show multiple Reply-To addresses (bmo #106189)</changelog>
<changelog author="stark@suse.de" date="1140782400">- dumpstack.patch is now in upstream patches
- added GTK category to desktop-files
- get more security/stability patches (#148876)</changelog>
<changelog author="stark@suse.de" date="1140091200">- applied set of security patches (#148876)
  fixed bmo bugs:
  282105, 307989, 310638, 315411, 315625, 320459, 320851,
  323634, 325005, 325403, 325947, 327126
- added GenericNames in desktop-files
- use new SeaMonkey logo for browser component in menus</changelog>
<changelog author="stark@suse.de" date="1139313600">- fixed disabling of Pango (#148788)</changelog>
<changelog author="stark@suse.de" date="1138881600">- removed heimdal patch for older distributions
- define gssapi lib explicitely (#147670)</changelog>
<changelog author="stark@suse.de" date="1138622400">- merged (hopefully) last patch before final seamonkey 1.0 release</changelog>
<changelog author="stark@suse.de" date="1138363200">- final 1.0 bits
- tweaked BuildRequires
- default to GTK2 filechooser if MOZ_XUL_PICKER is not set
  (same behaviour as Firefox)
- fixed system NSS usage</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="stark@suse.de" date="1138017600">- disable Pango if MOZ_ENABLE_PANGO is not set
  and no typical language which needs Pango is used (#143428)
- preload libaoss for plugin sound (#117079)
- fix to ignore X composite extension (#135373)
- fix subfolder check for default account at startup (bmo #323980)</changelog>
<changelog author="stark@suse.de" date="1137585600">- fixed DumpStackToFile for glibc 2.4</changelog>
<changelog author="stark@suse.de" date="1137412800">- update to current 1.0 snapshot (20060115)
- update enigmail to 0.94.0
- use -fstack-protector where available
- use system NSS since CODE10</changelog>
<changelog author="stark@suse.de" date="1135771200">- update to snapshot 1.8-20051227 (1.0b)</changelog>
<changelog author="stark@suse.de" date="1134388800">- update to snapshot 1.8-20051211
- use plugins in /usr/lib/browser-plugins
- update enigmail to 0.93.2
- added gtk2 patch to avoid theme switch events (#134831)
- replace mozilla packages with seamonkey for 10.1 and above</changelog>
<changelog author="stark@suse.de" date="1130155200">- update to snapshot 1.8-20051024
- update enigmail to 0.93.0
- package renamed to seamonkey with new versioning
- moved to /usr/lib</changelog>
<changelog author="stark@suse.de" date="1104235200">- removed obsolete translations from desktop-file
  (will be automatically added from macro)
- update to 1.7.5 (20041220)
- update enigmail to 0.89.6
- update ipc to 1.1.2
- removed s390/s390x patch (included upstream)
- add compiler option to enable backchain for s390/s390x
  inline assembling
- fixed extra lines in mail replies (bmo #144998)
- removed bounce patch (available as extension
  mailredirect.mozdev.org)
- added gconf setting patch to get more gconf settings if
  &quot;use system settings&quot; is used
- removed cross dependencies on release level</changelog>
<changelog author="ro@suse.de" date="1101211200">- fix build on 8.2</changelog>
<changelog author="ro@suse.de" date="1100779200">- use kerberos-devel-packages</changelog>
<changelog author="uli@suse.de" date="1097668800">- fixed ABI (s390*) and defines (s390x) thinkos, now actually works
  on these platforms</changelog>
<changelog author="stark@suse.de" date="1096459200">- fixed path to RealPlayer plugin</changelog>
<changelog author="stark@suse.de" date="1096372800">- another change to fix initial localization
  (thanks to mfabian)</changelog>
<changelog author="stark@suse.de" date="1096113600">- add ContentLocale parameter for initial localization (#44956)
- added patch for crasher in IMAP code (mozilla.org #257079)
- &quot;no-cache&quot; header was ignored for non-SSL sites
  (mozilla.org #252023)
- added fixed version for mozilla.org bug #257308
- fix in download handling (mozilla.org #259890)
- fix for Ximian #65176 (mozilla.org #240068)</changelog>
<changelog author="stark@suse.de" date="1096027200">- enabled logging for non-debug builds to be able to get some
  logfiles for debugging</changelog>
<changelog author="stark@suse.de" date="1095422400">- fixed broken patch-file</changelog>
<changelog author="stark@suse.de" date="1095422400">- added security fix for mozilla bug #258005
- trigger for java-1_4_2-sun-plugin (#45257)</changelog>
<changelog author="ro@suse.de" date="1095249600">- use version number directly</changelog>
<changelog author="sbrabec@suse.cz" date="1095249600">- Adopted mozilla.spec, so the same spec file can build also nvu.</changelog>
<changelog author="stark@suse.de" date="1094817600">- added some security related and crasher fixes:
  * Visual indicators of site security appear for the wrong site
    (mozilla.org #257308)
  * mailnews crasher (mozilla.org #258386)
  * fix arrow keys behaviour for GTK2 list boxes
    (mozilla.org #219706)
  * URL bar should not display passwords in URL
    (mozilla.org #157354)
- fix enigmail configuration (#44971)</changelog>
<changelog author="stark@suse.de" date="1094731200">- added patch for AMD64 endianess in JS component
  (#34743)</changelog>
<changelog author="stark@suse.de" date="1094472000">- added parts of the 1.7 branch
  (including CUPS integration)</changelog>
<changelog author="stark@suse.de" date="1094212800">- update enigmail to 0.86.0
- reworked start-script to invoke mozilla start/stop scripts</changelog>
<changelog author="ro@suse.de" date="1093262400">- make sure we can call mozilla-make-package.pl
  (do not rely on any permissions in RPM_SOURCE_DIR)</changelog>
<changelog author="sbrabec@suse.cz" date="1092916800">- README.installed-chrome: Added a sentence about scriptlet PreReq
  (#43990).</changelog>
<changelog author="stark@suse.de" date="1092312000">- added patch for ppc64 build</changelog>
<changelog author="stark@suse.de" date="1091707200">- update to 1.7.2 with security fixes
- update enigmail to 0.85.0
- handle RealPlayer 9 plugin
- added calendar-fix init script to package
- fixed file-list (packages-unix) and kprinter config for Desktop
- disabled SVG for distributions older than 8.2
- modified bounce patch to not disturb language-packs</changelog>
<changelog author="ro@suse.de" date="1091707200">- recode desktop file to utf-8</changelog>
<changelog author="stark@suse.de" date="1087560000">- update to 1.7
- update enigmail to 0.84.1
- remove compreg.dat prior to rebuild-databases (#41481)
- no longer disable-xprint
- build with heimdal
  (Support for Kerberos HTTP authentication using GSSAPI)</changelog>
<changelog author="ro@suse.de" date="1087473600">- added patch from garnome list to build with current freetype</changelog>
<changelog author="stark@suse.de" date="1083844800">- added patch to avoid compile-warnings</changelog>
<changelog author="stark@suse.de" date="1083758400">- update to 1.7rc1 (20040505)
- added patch to be able to bounce mail-messages
- update enigmail to 0.83.6
- added focus fix for gtkembedmoz
- changed behaviour of nullplugin
- removed x86-64 patch as it is now included upstream
- added new function in start script to start localized
  according to the environment if correct language pack is
  installed (for new profiles)</changelog>
<changelog author="stark@suse.de" date="1080907200">- removing relocation of TEMP directory (#34391)</changelog>
<changelog author="stark@suse.de" date="1080216000">- install more needed files (#36085)</changelog>
<changelog author="uli@suse.de" date="1080043200">- fixed hang during build on s390* (bug #35440)</changelog>
<changelog author="stark@suse.de" date="1079352000">- use xft.js only for gtk1 builds (not default)
- removed obsolete stuff from package
- install menu-icons and use them (#35992)
- install some more files (#36085)
- renewed bookmark-changes</changelog>
<changelog author="stark@suse.de" date="1078833600">- patch for keeping ui fonts (#35236)</changelog>
<changelog author="ro@suse.de" date="1078660800">- match function declaration in enigmail mimedummy.cpp</changelog>
<changelog author="stark@suse.de" date="1078315200">- fixed enigmail file-list (#35302)
- update enigmail to 0.83.4</changelog>
<changelog author="stark@suse.de" date="1078142400">- improved xremote behaviour in relation to other mozilla products
  (firefox, thunderbird) (#35179)</changelog>
<changelog author="stark@suse.de" date="1077624000">- fixed inclusion of mozex extension
- added compiler flags for security/ (nss-opt.patch)
- update enigmail to 0.83.3</changelog>
<changelog author="stark@suse.de" date="1077278400">- added build-fix for s390x (#32963)
- added mozex 1.07 to the package</changelog>
<changelog author="stark@suse.de" date="1075896000">- fixed calendar filelist
- enabled freetype for xft builds to improve printing</changelog>
<changelog author="stark@suse.de" date="1075291200">- update to enigmail 0.83.1
- fixed enigmail inclusion and activated it again</changelog>
<changelog author="stark@suse.de" date="1074513600">- update to 1.6 (20040114)
- set PS printer list in mozilla.sh
- update to enigmail 0.83.0
  (deactivated for now until a chrome issue is fixed)
- added mozilla-bonobo to plugin-handling
- use lib64 again for biarch platforms
- use kprinter and xft on SLEC (only for specfile-sharing)
- added fixed desktop files</changelog>
<changelog author="stark@suse.de" date="1067860800">- apply mips build-fix</changelog>
<changelog author="stark@suse.de" date="1066824000">- require myspell-dictionary only since 9.0</changelog>
<changelog author="stark@suse.de" date="1066219200">- update to 1.5 (final)</changelog>
<changelog author="stark@suse.de" date="1064836800">- update to Mozilla 1.5rc2
- added patch to enable freetype2 printing in xft builds
- removed overlay-files from filelist (delete them in preun)</changelog>
<changelog author="stark@suse.de" date="1064404800">- added mozplugger to add-plugins.sh
- added patch to expunge IMAP folders if &quot;remove immediately&quot;
  delete model is used
- update to 1.4.1
- update enigmail to 0.76.7</changelog>
<changelog author="sbrabec@suse.cz" date="1064318400">- Changed plugger-&gt;mozplugger (part of bug #31616).</changelog>
<changelog author="coolo@suse.de" date="1063886400">- make mozilla open URLs not files</changelog>
<changelog author="stark@suse.de" date="1063713600">- adopted RealPlayer inclusion for new path (#30990)</changelog>
<changelog author="adrian@suse.de" date="1062936000">- mozilla supports text/html MimeType</changelog>
<changelog author="adrian@suse.de" date="1062676800">- remove wrong start path in desktop file</changelog>
<changelog author="adrian@suse.de" date="1062417600">- install also desktop files for mail and composer
- make Mozilla start path FHS compliant</changelog>
<changelog author="hhetter@suse.de" date="1061812800">- revert from patch mentioned at Mozilla.org Bug #58613
  to get epiphany and galeon to build</changelog>
<changelog author="stark@suse.de" date="1061553600">- another upstream sync</changelog>
<changelog author="stark@suse.de" date="1060948800">- again more CVS patches from mozilla.org</changelog>
<changelog author="stark@suse.de" date="1060516800">- updated enigmail to 0.76.5</changelog>
<changelog author="stark@suse.de" date="1060344000">- again more CVS patches from mozilla.org
- adapted x86-64 patch for 1.4
- clean up configure options
- use -fno-strict-aliasing (#28534)</changelog>
<changelog author="stark@suse.de" date="1059652800">- integrated more patches from mozilla.org
- fixed deinstallation of dict-links
- removed unneeded files from filelist (for milestone builds)
- removed update-desktop-files again because it's in
  gtk2-devel-packages</changelog>
<changelog author="stark@suse.de" date="1059566400">- add-plugins.sh now links myspell-dictionaries for spellchecker
  (#26290)
- added some bugfixes from mozilla.org
- added update-desktop-files to neededforbuild</changelog>
<changelog author="stark@suse.de" date="1059480000">- added make-definition for build with Linux 2.6.x</changelog>
<changelog author="adrian@suse.de" date="1059393600">- add Categories to desktop file
- TODO: create .desktop files for other Mozilla modules</changelog>
<changelog author="stark@suse.de" date="1058961600">- check if DISPLAY set correctly (#28098)
- set $TEMP to $HOME for acroread (#27929)
- workaround the BUILD_ROOT issue in xpti.dat
- update enigmail to 0.76.3</changelog>
<changelog author="stark@suse.de" date="1058270400">- fix update from Mozilla 1.0.1 to 1.4
- update enigmail to 0.76.2
- added ICP-Brasil CA (#25840)
- added some minor patches from mozilla.org</changelog>
<changelog author="sbrabec@suse.cz" date="1058184000">- GNOME prefix change to /opt/gnome.</changelog>
<changelog author="schwab@suse.de" date="1057147200">- mozilla.sh: fix quoting, teach about emacsclient.</changelog>
<changelog author="stark@suse.de" date="1057060800">- update to 1.4 final</changelog>
<changelog author="stark@suse.de" date="1056542400">- fix AMD64 patch to fit mozilla version</changelog>
<changelog author="stark@suse.de" date="1056024000">- update to 1.4rc3 (20030619)
- added DFN CA certificate
- update enigmail to 0.76.1
- added assembler patch, IA64 should be usable now</changelog>
<changelog author="stark@suse.de" date="1055592000">- update to 1.4rc2 (20030613)
- fixed minor bug in update handling in %preun
- added missing directories to the filelist
- deactivated check for unpackaged files</changelog>
<changelog author="stark@suse.de" date="1055332800">- update to 1.4rc1 (20030610)
- switch to GTK2 build for STABLE
- update enigmail to 0.76.0</changelog>
<changelog author="stark@suse.de" date="1054123200">- update to 1.4b (20030526)
- added spellchecker subpackage (based on myspell)</changelog>
<changelog author="stark@suse.de" date="1052568000">- modified x86-64 patch to fit 1.4b</changelog>
<changelog author="stark@suse.de" date="1052395200">- updated to 1.4b (20030507)
- updated enigmail and ipc sources for 1.4
- adopt James Ogley's changes for gtk2 build
  - install pkgconfig stuff
  - include icons
  - desktop file in GNOME2 place
  - Provides: mozilla-gtk2 for building Galeon/Epiphany
- added /etc/gre.conf
- modified startscript to manipulate default open behaviour
  of URLs provided on commandline ($MOZ_NEWURL)
- some spec-file modifications for slow migration to
  Firebird</changelog>
<changelog author="stark@suse.de" date="1049371200">- updated enigmail to 0.74.0
- fixed minor bug in spec-file (only hit old SL versions)</changelog>
<changelog author="stark@suse.de" date="1049112000">- moved mozilla-config to /opt/mozilla/bin
- some rudimentary language autodetection
- reactivated XFT for 8.2
- make GTK2 optional for 8.2 and higher (disabled xmlterm)
- fixed bug in rebuild-databases.sh</changelog>
<changelog author="stark@suse.de" date="1048507200">- handle old plugins on update from versions before 1.3
- splitted calendar off from mozilla
- added XFT patches but disabled XFT for SuSE Linux 8.2 at this
  time
- added mozilla-config to devel package</changelog>
<changelog author="stark@suse.de" date="1047643200">- update to 1.3
- redirect error about missing file in rebuild-databases.sh
- update enigmail to 0.73.1
- added LEO searchplugin for dict.leo.org
- changed directory-structure to be more mozilla.org compatible
- removed s390 fix because changes are already in sources
- use XFT2 instead of freetype2 on SL8.2 and higher
- made add-plugins.sh compatible with older SL versions again
- enabled SVG support (including libart_lgpl)
- enabled calendar
- removed special splash because of copyright issues</changelog>
<changelog author="stark@suse.de" date="1047556800">- avoid creation of java link if Blackdown isn't installed
  but another Java is found (but not usable because of gcc)
  [Bug #25278]</changelog>
<changelog author="stark@suse.de" date="1047470400">- added new BlackdownJava2-JRE to RPM triggers</changelog>
<changelog author="kukuk@suse.de" date="1046692800">- Fix calling mozilla with options [Bug #24539]</changelog>
<changelog author="ro@suse.de" date="1046433600">- fixed add-plugins.sh for flash-player</changelog>
<changelog author="ro@suse.de" date="1046088000">- added tclplug and djvulibre</changelog>
<changelog author="ro@suse.de" date="1046088000">- add-plugins: use /usr/%_lib/browser-plugins
- flash plugin moved from netscape-plugins to flash-player</changelog>
<changelog author="stark@suse.de" date="1045569600">- reworked add-plugins.sh for newer Java versions
- moved libnssckbi.so to MOZILLA_FIVE_HOME (#22548)
- %preun bugfix</changelog>
<changelog author="sbrabec@suse.cz" date="1042804800">- Added README.installed-chrome to source package.</changelog>
<changelog author="pmladek@suse.cz" date="1042632000">- updated the x86_64.patch from Gwenole Beauchesne</changelog>
<changelog author="stark@suse.de" date="1039089600">- update to 1.2.1
- update Enigmail to 0.71.0
- removed SuSEconfig.mozilla
  now use add-plugins.sh together with %trigger statements
- use new chrome-management scheme
- don't add java plugin if built with gcc 3.x
- bugfix for using mozilla-xremote-client</changelog>
<changelog author="stark@suse.de" date="1038398400">- update to 1.2
- moved rebuild-databases to RPM scripts (only plugins are
  left in SuSEconfig.mozilla)
- added addon-chrome functionality to rebuild-databases.sh
- readded Enigmail source for 1.2
- reworked start-script for opening html-files (#16186)</changelog>
<changelog author="sbrabec@suse.cz" date="1037880000">- Added support for separate chrome (language) packs (bug #20700):
  updated rebuild-databases.sh and created and filled
  /opt/mozilla/installed-chrome.d.</changelog>
<changelog author="stepan@suse.de" date="1036584000">- fix mozilla on s390 and s390x</changelog>
<changelog author="stepan@suse.de" date="1035460800">- fix compilation on axp</changelog>
<changelog author="stark@suse.de" date="1034942400">- fixed error-messages during startup (#19556)</changelog>
<changelog author="mfabian@suse.de" date="1034856000">- Bug #20972: fix printing for Korean and Chinese by setting
  suitable default PostScript fonts</changelog>
<changelog author="sbrabec@suse.cz" date="1034078400">- Added support for Plugger in SuSEconfig.mozilla. Closes #20677.</changelog>
<changelog author="stark@suse.de" date="1032523200">- fixed documentation bugs #19811 and #19812</changelog>
<changelog author="stark@suse.de" date="1031832000">- include compat_wrapper.dif only on gcc 3.x based distributions</changelog>
<changelog author="sbrabec@suse.cz" date="1031745600">- Corrected %ifarch ix86 to %ifarch %ix86, otherwise compat_wrapper.dif
  is ignored.</changelog>
<changelog author="olh@suse.de" date="1031400000">- add gcc3 helper code for ppc32.
  Linux/PPC g++-3 ABI support for XPCOM</changelog>
<changelog author="stark@suse.de" date="1031140800">- update to 1.0.1 (20020903)
- added compat-wrapper for Flash on ix86
- removed Flash-player (use Flash from netscape-plugins)
- added Enigmail to mozilla-mail
- added patch for using an external editor for textareas and
  composer windows</changelog>
<changelog author="ro@suse.de" date="1030190400">- fixed ix86 to correct %ix86</changelog>
<changelog author="stark@suse.de" date="1030017600">- changed %ifarch i386 to ix86 for Flash</changelog>
<changelog author="stark@suse.de" date="1029931200">- fixed mozilla-copy-package.sh to fit the new parameter
  behaviour of cp</changelog>
<changelog author="uli@suse.de" date="1029412800">- added x86-64 port by Gwenole Beauchesne</changelog>
<changelog author="stark@suse.de" date="1028635200">- apply s390 patch only on s390</changelog>
<changelog author="stark@suse.de" date="1028548800">- added  patch to compile on s390(x)</changelog>
<changelog author="stark@suse.de" date="1023624000">- added japanese and german language pack</changelog>
<changelog author="stark@suse.de" date="1023278400">- update to 1.0
- moved libs to /opt/mozilla/{lib,lib64}</changelog>
<changelog author="sf@suse.de" date="1023278400">- apply x86_64-patch only on x86_64, as it breaks ix86</changelog>
<changelog author="sf@suse.de" date="1023278400">- added patch to build on x86_64 (does not really work yet,
  but needed for other packages)</changelog>
<changelog author="stark@suse.de" date="1022587200">- readded de-AT languagepack
- moved nss headers to include/nss</changelog>
<changelog author="stark@suse.de" date="1022500800">- added nss3 devel files</changelog>
<changelog author="stark@suse.de" date="1022241600">- update to 1.0rc3</changelog>
<changelog author="stark@suse.de" date="1021982400">- added new wrapper script
- build with -Os for gcc3
- added dom-inspector subpackage
- removed redundant ia64 patch</changelog>
<changelog author="schwab@suse.de" date="1021377600">- Configure only plugins that match mozilla arch.
- Fix some C++ issues.</changelog>
<changelog author="schwab@suse.de" date="1021204800">- Add binary only plugins only on supported architectures.</changelog>
<changelog author="stark@suse.de" date="1021118400">- update to 1.0rc2</changelog>
<changelog author="stark@suse.de" date="1020513600">- update to codebase 20020503 because of security-reasons
  (XMLHTTPRequest redirect bug)</changelog>
<changelog author="stark@suse.de" date="1019822400">- readded ja-JP and de-AT language packs and mozgest 0.3.3
- removed Requires: jre1.3.x
- update to codebase 20020425
- deactivated buggy mozgest for now</changelog>
<changelog author="stark@suse.de" date="1019131200">- update to 1.0RC1
- update flash to 5.0r48</changelog>
<changelog author="stark@suse.de" date="1018440000">- readded ja-JP language pack</changelog>
<changelog author="stark@suse.de" date="1016452800">- readded de-AT language pack</changelog>
<changelog author="stark@suse.de" date="1016107200">- update to milestone 0.9.9
- enabled freetype2 support</changelog>
<changelog author="stark@suse.de" date="1013428800">- readded ja-JP language/region pack</changelog>
<changelog author="stepan@suse.de" date="1013169600">- fixed building with gcc 3.x on ppc and alpha
- adopting assembler macros to ABI changes</changelog>
<changelog author="stark@suse.de" date="1013169600">- added de-AT language/region pack
- added patch to remove debug menu from preferences
- bzip2 flash-sources</changelog>
<changelog author="stark@suse.de" date="1012910400">- update to milestone 0.9.8
  (as always without language-packs)
- update mozgest to compatible 0.3.2</changelog>
<changelog author="stark@suse.de" date="1012910400">- minor changes of the configure parameters</changelog>
<changelog author="ro@suse.de" date="1012478400">- changed neededforbuild &lt;libpng&gt; to &lt;libpng-devel-packages&gt;</changelog>
<changelog author="hhetter@suse.de" date="1012478400">- added gdkxft-mozilla patch for TT Font Rendering</changelog>
<changelog author="uli@suse.de" date="1011268800">- removed /opt/mozilla/chrome/overlayinfo from filelist for ARM</changelog>
<changelog author="stark@suse.de" date="1009972800">- added de-AT language pack for 0.9.7</changelog>
<changelog author="stark@suse.de" date="1009713600">- added patch to handle empty file upload forms
  (#116210 bugzilla.mozilla.org)</changelog>
<changelog author="stark@suse.de" date="1009195200">- update to 0.9.7
  (deactivated JP and DE language packs as they are not
  available yet)</changelog>
<changelog author="stark@suse.de" date="1007553600">- changed cp options again to fix devel-package for version &gt; 7.0</changelog>
<changelog author="stark@suse.de" date="1007208000">- added de-AT language pack for 0.9.6
- removed option -L of cp commands (for compatibility with 7.0)</changelog>
<changelog author="stark@suse.de" date="1006776000">- made SuSEconfig.mozilla compatible with 7.3 again
- deactivated de-AT language pack (doesn't work for 0.9.6 :-()</changelog>
<changelog author="stark@suse.de" date="1006603200">- changed SuSEconfig.mozilla to fit next SuSE-release (Java)</changelog>
<changelog author="stark@suse.de" date="1006603200">- reactivated de-AT language pack for 0.9.5 (hopefully works)</changelog>
<changelog author="stark@suse.de" date="1006516800">- update to 0.9.6
- update mozgest to 0.3.1</changelog>
<changelog author="stark@suse.de" date="1005739200">- minor (cosmetic) change in SuSEconfig.mozilla
- readded Flash-Plugins to %files</changelog>
<changelog author="stark@suse.de" date="1005566400">- added Provides for new subpackages (split-aliases)
- reworked SuSEconfig.mozilla (for subpackages)</changelog>
<changelog author="stark@suse.de" date="1005220800">- readded build-id with SuSE extension
- added file to devel-package</changelog>
<changelog author="stark@suse.de" date="1005134400">- added bookmark.diff
- removed build-id from title</changelog>
<changelog author="stark@suse.de" date="1005134400">- added some devel files</changelog>
<changelog author="stark@suse.de" date="1005048000">- rewritten %install section to use mozilla packaging functions
- split package into sub-packages</changelog>
<changelog author="stark@suse.de" date="1004961600">- updated optimoz to RC0.3</changelog>
<changelog author="stark@suse.de" date="1003924800">- finally integrated optimoz (disabled and hidden by default)
- install only jar-archives in chrome
- added /opt/mozilla/rebuild-databases.sh</changelog>
<changelog author="hhetter@suse.de" date="1003924800">- include idl files in devel-package</changelog>
<changelog author="stark@suse.de" date="1003838400">- made SuSEconfig integrate RealPlayer- and Acrobat-Plugin
- requires now jre1.3.x
- added release_date (Gecko)
- moved some files to mode 644
- added patch to disable debug-menu in Composer
- set mailnews-startpage to about:blank
- set very-first startup-page to about:blank</changelog>
<changelog author="mfabian@suse.de" date="1003752000">- install Japanese Google-searchplugin under the name
  'google-japan.gif' and 'google-japan.src' in order not to
  overwrite the English original 'google.gif' and 'google.src'.</changelog>
<changelog author="mfabian@suse.de" date="1003579200">- update Japanese language pack to mozilla0.9.5-jajppack-v1.0.xpi</changelog>
<changelog author="stark@suse.de" date="1003233600">- update to 0.9.5
- added de_AT language pack
- make SuSEconfig integrate java from package java2
- added Macromedia Flashplayer/Shockwave
- added Optimoz 0.2.6 (partially, not active yet)</changelog>
<changelog author="egger@suse.de" date="1001073600">- Add libcms and libmng-devel to neededforbuild as suggested
  by Werner Fink.</changelog>
<changelog author="egger@suse.de" date="1001073600">- Redid my former patch to disable Debug menus and default
  to SuSE homepage.</changelog>
<changelog author="mfabian@suse.de" date="1001073600">- update Japanese language pack to mozilla0.9.4-langjajp-RC1.xpi
  and mozilla0.9.4-regjp-RC1.xpi</changelog>
<changelog author="draht@suse.de" date="1000987200">- merging with BETA-tree from egger@suse.de: upgrade to 0.9.4</changelog>
<changelog author="egger@suse.de" date="1000555200">- diff: Removed Debug menus.
- diff: Added sensible default values and default to SuSE homepage.</changelog>
<changelog author="egger@suse.de" date="1000209600">- Somehow some non-0.9.3 sources were in the previous tarball.
  Replaced them by the real ones.</changelog>
<changelog author="mfabian@suse.de" date="997704000">- added mozilla-cjk-config.patch again.
  (setup of PostScript fonts for printing Chinese, Japanese and
  Korean, default fonts for Chinese, Japanese and Korean).</changelog>
<changelog author="mfabian@suse.de" date="997358400">- add Japanese language pack mozilla0.9.3-langjajp-RC1.xpi
  and mozilla0.9.3-regjp-RC1.xpi (Korean language packs
  are only available for 0.9.2 and they don't work for 0.9.2,
  therefore they are commented out).</changelog>
<changelog author="egger@suse.de" date="997012800">- Updated to version 0.9.3.</changelog>
<changelog author="egger@suse.de" date="994334400">- Update to 0.9.2.
- Language packs are incompatible and not yet available so they'll
  follow later.</changelog>
<changelog author="mfabian@suse.de" date="993038400">- update Japanese language pack to mozilla0.9.1-langjajp.xpi
  and mozilla0.9.1-regjp.xpi</changelog>
<changelog author="egger@suse.de" date="992520000">- Update to version 0.9.1.</changelog>
<changelog author="egger@suse.de" date="989582400">- Fixed severe bugs in SuSEconfig.mozilla script that
  may prevent users from getting a working mozilla.</changelog>
<changelog author="mfabian@suse.de" date="988977600">- update Japanese language pack to mozilla0.8.1-langjajp.xpi
  and mozilla0.8.1-regjp.xpi</changelog>
<changelog author="egger@suse.de" date="988718400">- Update SuSEconfig.mozilla to use md5 sums</changelog>
<changelog author="mfabian@suse.de" date="986385600">- update Japanese language pack to langjajp-081-RC1.xpi
  and regjp-081-RC1.xpi</changelog>
<changelog author="egger@suse.de" date="985780800">- Updated to version 0.8.1.</changelog>
<changelog author="bk@suse.de" date="985003200">- strip mozilla shared libraries</changelog>
<changelog author="violiet@suse.de" date="984312000">- added Korean and Japanese Language pack.</changelog>
<changelog author="schwab@suse.de" date="983620800">- Try to add support for ia64.
- Fix run-mozilla link.</changelog>
<changelog author="egger@suse.de" date="982670400">- Integrated a reworked version of Bernd Kaindls
  patch to get the beast running from anywhere again.</changelog>
<changelog author="egger@suse.de" date="982584000">- Use BuildRoot.
- Reworked specfile.
- Corrected -devel package.</changelog>
<changelog author="egger@suse.de" date="982324800">- Update to version 0.8.</changelog>
<changelog author="kukuk@suse.de" date="980251200">- Fix use of SOURCE macro</changelog>
<changelog author="kukuk@suse.de" date="980251200">- Move post install section to extra SuSEconfig.mozilla [Bug #5642]</changelog>
<changelog author="mfabian@suse.de" date="980164800">- revert to 16 pt font for Japanese and Chinese. Japanese and
  Chinese characters are almost unreadable at 12pt.</changelog>
<changelog author="violiet@suse.de" date="980078400">- set korean and taiwan ps font printing patch.
- set mozilla used small 12pixels font.
- change improved font for Japanese and Korean.
- added Korean &amp; Japanese Name and Comment in Mozilla.desktop.</changelog>
<changelog author="egger@suse.de" date="978523200">- Quietness patch.
- Enabled JAR file creation.
- Added GNOME icon.
- New wrapper script.</changelog>
<changelog author="bk@suse.de" date="977745600">- set CFLAGS and CXXFLAGS for confgure to $RPM_OPT_FLAGS. With our
  configure flags(--enable-optimize -&gt; adds -O after CFLAGS) enabled
  this enables only the i486 arch code which brought me 5% speed
  increase in my test(Load page on hay), package size stays the same.</changelog>
<changelog author="egger@suse.de" date="977313600">- Integrated the latest bugfixes.
- Added: Provides: web_browser to the specfile.</changelog>
<changelog author="egger@suse.de" date="976622400">- Update to the real version 0.6.</changelog>
<changelog author="bk@suse.de" date="976363200">- updated to Mozilla 0.6 (milestone release based on the same branch
  as Netscape 6), looks good!
- fixed cp -r install to cp -rL(for forcing to follow the links...)
- fixed postinstall to do an chroot before calling programs...</changelog>
<changelog author="kukuk@suse.de" date="975672000">- Fix spec file syntax</changelog>
<changelog author="egger@suse.de" date="975672000">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="974894400">- Reworked the specfile and of course
- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="974808000">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="973857600">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="973512000">- Made a new snapshot.</changelog>
<changelog author="ro@suse.de" date="973512000">- fixed neededforbuild</changelog>
<changelog author="egger@suse.de" date="972734400">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="972388800">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="971438400">- Made a new snapshot.
- Changed specfile slightly.</changelog>
<changelog author="egger@suse.de" date="971438400">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="971006400">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="970747200">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="970574400">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="970056000">- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="969537600">- Add mozilla development package to provide the necessary
  headers for embedding the gecko engine.
- Try the new registering.</changelog>
<changelog author="egger@suse.de" date="969278400">- Ok, forgot to save the right specfile... Sorry.</changelog>
<changelog author="egger@suse.de" date="969278400">- New snapshot.
- Removed SPARC patch, the mozilla people applied the patch.
- Tested package on i386.</changelog>
<changelog author="egger@suse.de" date="966859200">- Try a hint from the mozilla people to prevent that ugly mail
  hack.
- Made a new snapshot.</changelog>
<changelog author="egger@suse.de" date="963316800">- Updated to postM17: Lots of bugfixes and perfomanceimprovements.</changelog>
<changelog author="egger@suse.de" date="963316800">- Link run-mozilla.sh to /usr/X11/bin/mozilla.
- Correct the wrapper script to work from anywhere.
- Send a mail to the admin after installing mozilla
  to tell him that he has to run mozilla once as root.</changelog>
<changelog author="ro@suse.de" date="963230400">- specfile fix</changelog>
<changelog author="ro@suse.de" date="963230400">- try to call mozilla to create registry</changelog>
<changelog author="kukuk@suse.de" date="962971200">- Add SPARC fix back</changelog>
<changelog author="egger@suse.de" date="962884800">- Unified tarballs.
- Change incorrect strip command.</changelog>
<changelog author="ro@suse.de" date="962798400">- added more dirs</changelog>
<changelog author="egger@suse.de" date="962798400">- Add missing dirs...</changelog>
<changelog author="egger@suse.de" date="962712000">- Use latest bugfix snapshot.
- Try to prevent a bug in libpthreads/nspr by building
  with debugging and strip everything afterwards.
- Enable optimize because it works now.
- Install wrapper script instead of binary into exectuable
  path to work around problems...</changelog>
<changelog author="egger@suse.de" date="961156800">- Use latest snapshot.
- Recheckin since the last update got lost...
- Bumped version to M16.</changelog>
<changelog author="egger@suse.de" date="960724800">- Use latest snapshot.
- Checked out missing dir, too.</changelog>
<changelog author="egger@suse.de" date="960552000">- Use latest snapshot.</changelog>
<changelog author="egger@suse.de" date="959428800">- Well, maybe I should have replaced all occurences of X11... :)</changelog>
<changelog author="egger@suse.de" date="958996800">- /usr/X11/bin/mozilla is not allowed anymore, so use
  /usr/X11R6/bin/mozilla.</changelog>
<changelog author="egger@suse.de" date="958651200">- Checked in new snapshot.</changelog>
<changelog author="egger@suse.de" date="958392000">- Readded orbit to the requirements.</changelog>
<changelog author="egger@suse.de" date="958219200">- Checked in completely new .spec-file and the
  latest CVS snapshot.</changelog>
<changelog author="bk@suse.de" date="955281600">- added suse update config macro
- added automake to list of packages needed for building mozilla</changelog>
<changelog author="ro@suse.de" date="954244800">- removed optimize</changelog>
<changelog author="ro@suse.de" date="953812800">- update to M14-no-crypto</changelog>
<changelog author="kukuk@suse.de" date="949060800">- Update to M13
- Fix for SPARC</changelog>
<changelog author="ro@suse.de" date="948801600">- update to M12</changelog>
<changelog author="ro@suse.de" date="945259200">- reworked install-section of specfile</changelog>
<changelog author="ro@suse.de" date="943444800">- update to M11</changelog>
<changelog author="ro@suse.de" date="940420800">- added comment for ld-script</changelog>
<changelog author="ro@suse.de" date="940248000">- fixed config.sub for ev6</changelog>
<changelog author="ro@suse.de" date="939729600">- update to M10</changelog>
<changelog author="bs@suse.de" date="937224000">- ran old prepare_spec on spec file to switch to new prepare_spec.</changelog>
<changelog author="bs@suse.de" date="932040000">- user glib, gtk instead of glibn, gtkn
- call Check after install</changelog>
<changelog author="ro@suse.de" date="928411200">- update to M6</changelog>
<changelog author="ro@suse.de" date="928238400">- fixed shellscripts for startup</changelog>
<changelog author="ro@suse.de" date="928238400">- moved libraries to /usr/lib/mozilla/lib
  and start using &quot;LD_LIBRARY_PATH&quot;</changelog>
<changelog author="ro@suse.de" date="928152000">- created packages (mozilla and mozillad)</changelog>
</package>
<package pkgid="daa7629cfa1b6af7837e2d6a41ed39a23c9537c0" name="seamonkey-translations-other" arch="i586">
<version epoch="0" ver="2.0.12" rel="0.3.1"/>
<changelog author="wr@rosenauer.org" date="1295870400">- security update to version 2.0.12 (bnc#667155)
  * MFSA 2011-01/CVE-2011-0053/CVE-2011-0062
    Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)
  * MFSA 2011-02/CVE-2011-0051 (bmo#616659)
    Recursive eval call causes confirm dialogs to evaluate to true
  * MFSA 2011-03/CVE-2011-0055 (bmo#616009, bmo#619255)
    Use-after-free error in JSON.stringify
  * MFSA 2011-04/CVE-2011-0054 (bmo#615657)
    Buffer overflow in JavaScript upvarMap
  * MFSA 2011-05/CVE-2011-0056 (bmo#622015)
    Buffer overflow in JavaScript atom map
  * MFSA 2011-06/CVE-2011-0057 (bmo#626631)
    Use-after-free error using Web Workers
  * MFSA 2011-08/CVE-2010-1585 (bmo#562547)
    ParanoidFragmentSink allows javascript: URLs in chrome documents
  * MFSA 2011-09/CVE-2011-0061 (bmo#610601)
    Crash caused by corrupted JPEG image
  * MFSA 2011-10/CVE-2011-0059 (bmo#573873)
    CSRF risk with plugins and 307 redirects</changelog>
<changelog author="wr@rosenauer.org" date="1294660800">- add x-scheme-handlers to desktop files as needed by newer Gnome
  environment</changelog>
<changelog author="wr@rosenauer.org" date="1290686400">- security update to version 2.0.11 (bnc#657016)
  * MFSA 2010-74/CVE-2010-3776/CVE-2010-3777/CVE-2010-3778
    Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)
  * MFSA 2010-75/CVE-2010-3769 (bmo#608336)
    Buffer overflow while line breaking after document.write with
    long string
  * MFSA 2010-76/CVE-2010-3771 (bmo#609437)
    Chrome privilege escalation with window.open and &lt;isindex&gt; element
  * MFSA 2010-77/CVE-2010-3772 (bmo#594547)
    Crash and remote code execution using HTML tags inside a XUL tree
  * MFSA 2010-78/CVE-2010-3768 (bmo#527276)
    Add support for OTS font sanitizer
  * MFSA 2010-79/CVE-2010-3775
    Java security bypass from LiveConnect loaded via data: URL
    meta refresh
  * MFSA 2010-80/CVE-2010-3766 (bmo#590771)
    Use-after-free error with nsDOMAttribute MutationObserver
  * MFSA 2010-81/CVE-2010-3767 (bmo#599468)
    Integer overflow vulnerability in NewIdArray
  * MFSA 2010-82/CVE-2010-3773 (bmo#554449)
    Incomplete fix for CVE-2010-0179
  * MFSA 2010-83/VE-2010-3774 (bmo#602780)
    Location bar SSL spoofing using network error page
  * MFSA 2010-84/CVE-2010-3770 (bmo#601429)
    XSS hazard in multiple character encodings</changelog>
<changelog author="wr@rosenauer.org" date="1288180800">- security update to version 2.0.10 (bnc#649492)
  * MFSA 2010-73/CVE-2010-3765 (bmo#607222)
    Heap buffer overflow mixing document.write and DOM insertion</changelog>
<changelog author="wr@rosenauer.org" date="1286452800">- security update to version 2.0.9 (bnc#645315)
  * MFSA 2010-64/CVE-2010-3174/CVE-2010-3175/CVE-2010-3176
    Miscellaneous memory safety hazards
  * MFSA 2010-65/CVE-2010-3179 (bmo#583077)
    Buffer overflow and memory corruption using document.write
  * MFSA 2010-66/CVE-2010-3180 (bmo#588929)
    Use-after-free error in nsBarProp
  * MFSA 2010-67/CVE-2010-3183 (bmo#598669)
    Dangling pointer vulnerability in LookupGetterOrSetter
  * MFSA 2010-68/CVE-2010-3177 (bmo#556734)
    XSS in gopher parser when parsing hrefs
  * MFSA 2010-69/CVE-2010-3178 (bmo#576616)
    Cross-site information disclosure via modal calls
  * MFSA 2010-70/CVE-2010-3170 (bmo#578697)
    SSL wildcard certificate matching IP addresses
  * MFSA 2010-71/CVE-2010-3182 (bmo#590753, bnc#642502)
    Unsafe library loading vulnerabilities
  * MFSA 2010-72/CVE-2010-3173
    Insecure Diffie-Hellman key exchange
  * removed upstreamed mozilla-helper-app.patch
- require mozilla-nss &gt;= 3.12.8</changelog>
<changelog author="wr@rosenauer.org" date="1284552000">- update to 2.0.8
  * fixing startup topcrash (bmo#594699)
  * add &quot;face&quot; to the list of white-listed attributes (bmo#592601)
- added Cairo LCD filter patch to enable subpixel hinting where
  supported (bnc#638186) (mozilla-cairo-lcd.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1282824000">- security upate to 2.0.7 (bnc#637303)
  * MFSA 2010-49/CVE-2010-3169
    Miscellaneous memory safety hazards
  * MFSA 2010-50/CVE-2010-2765 (bmo#576447)
    Frameset integer overflow vulnerability
  * MFSA 2010-51/CVE-2010-2767 (bmo#584512)
    Dangling pointer vulnerability using DOM plugin array
  * MFSA 2010-53/CVE-2010-3166 (bmo#579655)
    Heap buffer overflow in nsTextFrameUtils::TransformText
  * MFSA 2010-54/CVE-2010-2760 (bmo#585815)
    Dangling pointer vulnerability in nsTreeSelection
  * MFSA 2010-55/CVE-2010-3168 (bmo#576075)
    XUL tree removal crash and remote code execution
  * MFSA 2010-56/CVE-2010-3167 (bmo#576070)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-57/CVE-2010-2766 (bmo#580445)
    Crash and remote code execution in normalizeDocument
  * MFSA 2010-60/CVE-2010-2763 (bmo#585284)
    XSS using SJOW scripted function
  * MFSA 2010-61/CVE-2010-2768 (bmo#579744)
    UTF-7 XSS by overriding document charset using &lt;object&gt; type
    attribute
  * MFSA 2010-62/CVE-2010-2769 (bmo#520189)
    Copy-and-paste or drag-and-drop into designMode document allows
    XSS
  * MFSA 2010-63/CVE-2010-2764 (bmo#552090)
    Information leak via XMLHttpRequest statusText
- always use internal cairo (bnc#622375, bnc#626042)</changelog>
<changelog author="wr@rosenauer.org" date="1279281600">- security update to 2.0.6 (bnc#622506)
  * MFSA 2010-34/CVE-2010-1211/CVE-2010-1212
    Miscellaneous memory safety hazards
  * MFSA 2010-35/CVE-2010-1208 (bmo#572986)
    DOM attribute cloning remote code execution vulnerability
  * MFSA 2010-36/CVE-2010-1209 (bmo#552110)
    Use-after-free error in NodeIterator
  * MFSA 2010-37/CVE-2010-1214 (bmo#572985)
    Plugin parameter EnsureCachedAttrParamArrays remote code
    execution vulnerability
  * MFSA 2010-39/CVE-2010-2752 (bmo#574059)
    nsCSSValue::Array index integer overflow
  * MFSA 2010-40/CVE-2010-2753 (bmo#571106)
    nsTreeSelection dangling pointer remote code execution
    vulnerability
  * MFSA 2010-41/CVE-2010-1205 (bmo#570451)
    Remote code execution using malformed PNG image
  * MFSA 2010-42/CVE-2010-1213 (bmo#568148)
    Cross-origin data disclosure via Web Workers and importScripts
  * MFSA 2010-45/CVE-2010-1206/CVE-2010-2751 (bmo#536466,556957)
    Multiple location bar spoofing vulnerabilities
  * MFSA 2010-46/CVE-2010-0654 (bmo#524223)
    Cross-domain data theft using CSS
  * MFSA 2010-47/CVE-2010-2754 (bmo#568564)
    Cross-origin data leakage from script filename in error messages</changelog>
<changelog author="wr@rosenauer.org" date="1273233600">- security update to 2.0.5 (bnc#603356)
  * MFSA 2010-25/CVE-2010-1121 (bmo#555109)
    Re-use of freed object due to scope confusion
  * MFSA 2010-26/CVE-2010-1200/CVE-2010-1201/CVE-2010-1202/
    CVE-2010-1203
    Crashes with evidence of memory corruption (rv:1.9.1.10)
  * MFSA 2010-27/CVE-2010-0183 (bmo#557174)
    Use-after-free error in nsCycleCollector::MarkRoots()
  * MFSA 2010-28/CVE-2010-1198 (bmo#532246)
    Freed object reuse across plugin instances
  * MFSA 2010-29/CVE-2010-1196 (bmo#534666)
    Heap buffer overflow in nsGenericDOMDataNode::SetTextInternal
  * MFSA 2010-30/CVE-2010-1199 (bmo#554255)
    Integer Overflow in XSLT Node Sorting
  * MFSA 2010-31/CVE-2010-1125 (bmo#552255)
    focus() behavior can be used to inject or steal keystrokes
  * MFSA 2010-32/CVE-2010-1197 (bmo#537120)
    Content-Disposition: attachment ignored if
    Content-Type: multipart also present
  * MFSA 2010-33/CVE-2008-5913 (bmo#475585)
    User tracking across sites using Math.random()</changelog>
<changelog author="wr@rosenauer.org" date="1268827200">- security update to 2.0.4 (bnc#586567)
  * MFSA 2010-16/CVE-2010-0173/CVE-2010-0174
    Crashes with evidence of memory corruption
  * MFSA 2010-17/CVE-2010-0175 (bmo#540100,375928)
    Remote code execution with use-after-free in nsTreeSelection
  * MFSA 2010-18/CVE-2010-0176 (bmo#538308)
    Dangling pointer vulnerability in nsTreeContentView
  * MFSA 2010-19/CVE-2010-0177 (bmo#538310)
    Dangling pointer vulnerability in nsPluginArray
  * MFSA 2010-20/CVE-2010-0178 (bmo#546909)
    Chrome privilege escalation via forced URL drag and drop
  * MFSA 2010-22/CVE-2009-3555 (bmo#545755)
    Update NSS to support TLS renegotiation indication
  * MFSA 2010-23/CVE-2010-0181 (bmo#452093)
    Image src redirect to mailto: URL opens email editor
  * MFSA 2010-24/CVE-2010-0182 (bmo#490790)
    XMLDocument::load() doesn't check nsIContentPolicy</changelog>
<changelog author="wr@rosenauer.org" date="1267012800">- added translation subpackages</changelog>
<changelog author="wr@rosenauer.org" date="1266408000">- security update to 2.0.3 (bnc#576969)
  * MFSA-2010-01/CVE-2010-0159
    Crashes with evidence of memory corruption
  * MFSA-2010-02/CVE-2010-0160
    Web Worker Array Handling Heap Corruption Vulnerability
  * MFSA-2010-03/CVE-2009-1571 (bmo#526500)
    Use-after-free crash in HTML parser
  * MFSA-2010-04/CVE-2009-3988 (bmo#504862)
    XSS due to window.dialogArguments being readable cross-domain
  * MFSA-2010-05/CVE-2010-0162 (bmo#455472)
    XSS hazard using SVG document and binary Content-Type</changelog>
<changelog author="vuntz@opensuse.org" date="1263816000">- Remove unneeded orbit-devel BuildRequires.</changelog>
<changelog author="wr@rosenauer.org" date="1262692800">- stability update to 2.0.2 (bnc#568011)
  * DNS resolution in MakeSN of nsAuthSSPI causing issues for
    proxy servers that support NTLM auth (bmo#535193)</changelog>
<changelog author="wr@rosenauer.org" date="1260446400">- security update to 2.0.1 (bnc#559807)
  * MFSA 2009-65/CVE-2009-3979/CVE-2009-3980/CVE-2009-3982
    Crashes with evidence of memory corruption (rv:1.9.1.6)
  * MFSA 2009-66/CVE-2009-3388 (bmo#504843,bmo#523816)
    Memory safety fixes in liboggplay media library
  * MFSA 2009-67/CVE-2009-3389 (bmo#515882,bmo#504613)
    Integer overflow, crash in libtheora video library
  * MFSA 2009-68/CVE-2009-3983 (bmo#487872)
    NTLM reflection vulnerability
  * MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232)
    Location bar spoofing vulnerabilities
  * MFSA 2009-70/VE-2009-3986 (bmo#522430)
    Privilege escalation via chrome window.opener</changelog>
<changelog author="wr@rosenauer.org" date="1255953600">- update to 2.0rc2 which might become the final 2.0 version
  * based on final Gecko 1.9.1.4 (build3)</changelog>
<changelog author="wr@rosenauer.org" date="1255003200">- update to 2.0rc1
  * based on Gecko 1.9.1.4
  * removed upstreamed patches
  * compatible with enigmail (bnc#544326, bnc#530811)
- fixed startup notification (bnc#518603)
  (mozilla-startup-notification.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1252929600">- update to 2.0b2
  * removed obsolete mozilla-jemalloc_deepbind.patch and
    mozilla-app-launcher.patch
- remove obsolete code for protocol handlers (bmo#389732)
- allow alternative button order for Gtk filechooser (bnc#527418)
- added mozilla-prefer_plugin_pref.patch to introduce a new set of
  prefs to support preferring certain plugins for mime-types
- added mozilla-sysplugin-biarch.patch to use
  /usr/$LIB/mozilla/plugins as system plugin dir (bmo#496708)</changelog>
<changelog author="wr@rosenauer.org" date="1250769600">- added Provides and Obsoletes for package merge (bnc#532678)
- allow alternative button order for Gtk filechooser (bnc#527418)</changelog>
<changelog author="wr@rosenauer.org" date="1248782400">- fixed %exclude usage</changelog>
<changelog author="wr@rosenauer.org" date="1248177600">- update to 2.0b1
- added create-tar.sh to source package
- removed enigmail as it's provided as an own package built in
  Thunderbird now</changelog>
<changelog author="@rosenauer.org" date="1247140800">- update to 2.0a3-20090707 snapshot
- define MOZ_APP_LAUNCHER for session management (bmo#453689)
  (mozilla-app-launcher.patch and mozilla.sh.in)
- move intl.locale.matchOS to distribution specific prefs
  (removed locale.patch)
- moved openSUSE specific prefs from greprefs to app prefs
- added mozilla-jemalloc_deepbind.patch to fix various possible
  crashes (bnc#503151, bmo#493541)
- added seamonkey-no-update.patch to hide the update menu item</changelog>
<changelog author="wr@rosenauer.org" date="1245240000">- major update to 2.0a3-20090617
  * based on Gecko 1.9.1
  * ported to Mozilla's toolkit</changelog>
<changelog author="wr@rosenauer.org" date="1239451200">- security update to 1.1.16 (bnc#488955,489411,492354)
  * MFSA 2009-12/CVE-2009-1169 (bmo#460090,485217)
    Crash and remote code execution in XSL transformation
  * MFSA 2009-13/CVE-2009-1044 (bmo#484320)
    Arbitrary code execution via XUL tree moveToEdgeShift</changelog>
<changelog author="wr@rosenauer.org" date="1237464000">- update to security release 1.1.15 (bnc#478625)
  * MFSA 2009-07/CVE-2009-0771, CVE-2009-0772, CVE-2009-0773
    CVE-2009-0774:
    Crashes with evidence of memory corruption (rv:1.9.0.7)
  * MFSA 2009-09/CVE-2009-0776:
    XML data theft via RDFXMLDataSource and cross-domain redirect
  * MFSA 2009-10/CVE-2009-0040:
    Upgrade PNG library to fix memory safety hazards
- use nss-shared-helper from 11.1 on which allows migrating to and
  sharing with other applications using NSS
  (can be disabled completely exporting MOZ_SM_NO_NSSHELPER=1)</changelog>
</package>
<package pkgid="fa939691f6cf4ec229ba02135ed4af9defa7ef2c" name="timezone-java" arch="noarch">
<version epoch="0" ver="2011c" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1299931200">- update to 2011c:
  * northamerica  Replace Juneau with Juneau, Sitka, and Metlakatla.
  * southamerica  Delay end of DST in 2011 until first Sunday in April.</changelog>
<changelog author="dmueller@suse.de" date="1297857600">- update to 2011b:
  * updates for australasia and northamerica</changelog>
<changelog author="dmueller@suse.de" date="1288699200">- update to 2010o:
  * fix Pacific/Apia and Austalasia/Fiji</changelog>
<changelog author="dmueller@suse.de" date="1286280000">- update to 2010m:
  * fix historic data of Antarctica/Vostok</changelog>
<changelog author="dmueller@suse.de" date="1285070400">- change execlp into execl</changelog>
<changelog author="ro@suse.de" date="1282737600">- add missing sentinel to tzcode-link.diff</changelog>
<changelog author="pbaudis@suse.cz" date="1282651200">- Make zic -l do a copy when hardlinking fails (e.g. because /usr
  being on a separate partition) [bnc#607532]</changelog>
<changelog author="ro@suse.de" date="1282219200">- un-fuzz patches to fix build</changelog>
<changelog author="pbaudis@suse.cz" date="1282219200">- update tzdata to 2010l
  * DST changes: Africa/Cairo, Africa/Casablanca, Asia/Gaza,
    America/Argentina/San_Luis
  * New zones: America/Bahia_Banderas
  * Historical changes: Asia/Taipei, Europe/Helsinki
  * Spelling changes: Pacific/Chuuk, Pacific/Pohnpei</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pbaudis@suse.cz" date="1270555200">- update tzdata to 2010h:
  * DST changes: Asia/Dhaka (again...), Asia/Karachi, Asia/Gaza,
    Asia/Damascus, Pacific/Apia, Africa/Tunis
  * GMT offset changes: Europe/Samara, Asia/Kamchatka, Asia/Anadyr
  * Various Antarctica timezone changes</changelog>
<changelog author="pbaudis@suse.cz" date="1268913600">- cleanup; changes since 2009u are:
  * DST changes: Asia/Dhaka (yet again), Pacific/Fiji, Pacific/Apia,
    America/Santiago, Pacific/Easter, America/Asuncion
  * New zones: America/Matamoros, America/Ojinaga, America/Santa_Isabel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1268568000">- Update to 2010e, including Chile's emergency DST changes
- Update code to 2010c - mostly just cleanups</changelog>
<changelog author="pbaudis@suse.cz" date="1262692800">- update tzdata to 2009u:
  * DST changes: Asia/Damascus, Asia/Dhaka, Pacific/Fiji
  * GMT offset changes: some bases in Antartica
  * New zones: Asia/Novokuznetsk
  * Historical changes: Asia/Hong_Kong
- typo fix in Asia/Dhaka Jun 2009 transition rule</changelog>
<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="pbaudis@suse.cz" date="1256558400">- update data to 2009p - Argentina switch to DST</changelog>
<changelog author="pbaudis@suse.cz" date="1256299200">- update data to 2009o:
  * DST changes: Asia/Karachi, Asia/Dhaka
- Apply a patch for changes in Argentina DST: Argentina is not
  switching to DST, except America/Argentina/SanLuis; version number
  modified to 2009oa to reflect the extra patch.</changelog>
<changelog author="pbaudis@suse.cz" date="1252929600">- The abbreviation definition of GB should be United Kingdom instead
  of Britain (UK) [bnc#519410]</changelog>
<changelog author="pbaudis@suse.cz" date="1252411200">- update data to 2009m:
  * DST changes: Africa/Cairo, Indian/Mauritius, Asia/Dhaka,
    Asia/Karachi, Asia/Gaza, Pacific/Apia
  * Fix bad DST information since 2002: Asia/Amman
- update code to 2009k:
  * zic tried to generate wrong POSIX tz string in a pathological case</changelog>
<changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
<changelog author="werner@suse.de" date="1240315200">- Use Unversial time zone for posixrules
- Use mktemp from coreutiles for temporary file</changelog>
<changelog author="pbaudis@suse.cz" date="1238068800">- update to 2009d:
  * DST changes: Africa/Casablanca, Africa/Tunis, Asia/Damascus,
    America/Argentina/San_Luis</changelog>
</package>
<package pkgid="5f80ae9394426d4117161f80238b923cafc80936" name="timezone-java" arch="src">
<version epoch="0" ver="2011c" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1299931200">- update to 2011c:
  * northamerica  Replace Juneau with Juneau, Sitka, and Metlakatla.
  * southamerica  Delay end of DST in 2011 until first Sunday in April.</changelog>
<changelog author="dmueller@suse.de" date="1297857600">- update to 2011b:
  * updates for australasia and northamerica</changelog>
<changelog author="dmueller@suse.de" date="1288699200">- update to 2010o:
  * fix Pacific/Apia and Austalasia/Fiji</changelog>
<changelog author="dmueller@suse.de" date="1286280000">- update to 2010m:
  * fix historic data of Antarctica/Vostok</changelog>
<changelog author="dmueller@suse.de" date="1285070400">- change execlp into execl</changelog>
<changelog author="ro@suse.de" date="1282737600">- add missing sentinel to tzcode-link.diff</changelog>
<changelog author="pbaudis@suse.cz" date="1282651200">- Make zic -l do a copy when hardlinking fails (e.g. because /usr
  being on a separate partition) [bnc#607532]</changelog>
<changelog author="ro@suse.de" date="1282219200">- un-fuzz patches to fix build</changelog>
<changelog author="pbaudis@suse.cz" date="1282219200">- update tzdata to 2010l
  * DST changes: Africa/Cairo, Africa/Casablanca, Asia/Gaza,
    America/Argentina/San_Luis
  * New zones: America/Bahia_Banderas
  * Historical changes: Asia/Taipei, Europe/Helsinki
  * Spelling changes: Pacific/Chuuk, Pacific/Pohnpei</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pbaudis@suse.cz" date="1270555200">- update tzdata to 2010h:
  * DST changes: Asia/Dhaka (again...), Asia/Karachi, Asia/Gaza,
    Asia/Damascus, Pacific/Apia, Africa/Tunis
  * GMT offset changes: Europe/Samara, Asia/Kamchatka, Asia/Anadyr
  * Various Antarctica timezone changes</changelog>
<changelog author="pbaudis@suse.cz" date="1268913600">- cleanup; changes since 2009u are:
  * DST changes: Asia/Dhaka (yet again), Pacific/Fiji, Pacific/Apia,
    America/Santiago, Pacific/Easter, America/Asuncion
  * New zones: America/Matamoros, America/Ojinaga, America/Santa_Isabel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1268568000">- Update to 2010e, including Chile's emergency DST changes
- Update code to 2010c - mostly just cleanups</changelog>
<changelog author="pbaudis@suse.cz" date="1262692800">- update tzdata to 2009u:
  * DST changes: Asia/Damascus, Asia/Dhaka, Pacific/Fiji
  * GMT offset changes: some bases in Antartica
  * New zones: Asia/Novokuznetsk
  * Historical changes: Asia/Hong_Kong
- typo fix in Asia/Dhaka Jun 2009 transition rule</changelog>
<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="pbaudis@suse.cz" date="1256558400">- update data to 2009p - Argentina switch to DST</changelog>
<changelog author="pbaudis@suse.cz" date="1256299200">- update data to 2009o:
  * DST changes: Asia/Karachi, Asia/Dhaka
- Apply a patch for changes in Argentina DST: Argentina is not
  switching to DST, except America/Argentina/SanLuis; version number
  modified to 2009oa to reflect the extra patch.</changelog>
<changelog author="pbaudis@suse.cz" date="1252929600">- The abbreviation definition of GB should be United Kingdom instead
  of Britain (UK) [bnc#519410]</changelog>
<changelog author="pbaudis@suse.cz" date="1252411200">- update data to 2009m:
  * DST changes: Africa/Cairo, Indian/Mauritius, Asia/Dhaka,
    Asia/Karachi, Asia/Gaza, Pacific/Apia
  * Fix bad DST information since 2002: Asia/Amman
- update code to 2009k:
  * zic tried to generate wrong POSIX tz string in a pathological case</changelog>
<changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
<changelog author="werner@suse.de" date="1240315200">- Use Unversial time zone for posixrules
- Use mktemp from coreutiles for temporary file</changelog>
<changelog author="pbaudis@suse.cz" date="1238068800">- update to 2009d:
  * DST changes: Africa/Casablanca, Africa/Tunis, Asia/Damascus,
    America/Argentina/San_Luis</changelog>
<changelog author="schwab@suse.de" date="1235476800">- Don't copy directory into itself.</changelog>
<changelog author="dmueller@suse.de" date="1235390400">- update to 2009b:
  * leapseconds: updated to reflect no mid-2009 leap second
  * zic.c: fix fence-post error (fixes corrupt timezone
  database)</changelog>
<changelog author="dmueller@suse.de" date="1233662400">- update to 2009a:
  * asia
    change Katmandu to Kathmandu
  * backward
    provide Katmandu link
  * europe
    correct Swiss rules
  * northamerica
    clearer definition of Cuban transitions (no binary change)
    Resolute changes abbreviation (but not time) twice a year</changelog>
<changelog author="dmueller@suse.de" date="1228305600">- update to 2008i:
  * South America Updates (corrections to Argentina DST rules)
  * US zone reordering and recommenting</changelog>
<changelog author="pbaudis@suse.cz" date="1224072000">- Add coreutils to the prerequisites [bnc#420365]</changelog>
<changelog author="pbaudis@suse.cz" date="1223899200">- update to 2008h: Fix DST for Indian/Mauritius and Asia/Damascus</changelog>
<changelog author="dmueller@suse.de" date="1223553600">- update to 2008g:
  * Pakistan, Mauritius, Gaza, Argentina, Brazil, Mongolia,
    Morocco, Cuba, Chile</changelog>
<changelog author="mvyskocil@suse.cz" date="1222689600">- Moved the timezone-java to separate specfile (adrian's request for better
  bootstrapping of SUSE)</changelog>
<changelog author="mvyskocil@suse.cz" date="1221048000">- Remove a rht renaming hack, because is not necessary in SUSE's build system
  and move the javazic to a new package
- Use a gcc-gij as a default java implementation
- Use a %setup macro instead of tar -xf
- Use javazi as a destination directory for java zone info files.</changelog>
<changelog author="mvyskocil@suse.cz" date="1220616000">- Add new java subpackage (necessary for openjdk)</changelog>
<changelog author="pbaudis@suse.cz" date="1212494400">- Update to version 2008c (Marocco, Mongolia, Pakistan DST changes)
  [bnc#396308]</changelog>
<changelog author="pbaudis@suse.cz" date="1207137600">- Update to version 2008b (esp. Chile, Cuba, Iraq, Syria DST changes)
  [bnc#368760]</changelog>
<changelog author="pbaudis@suse.cz" date="1201262400">- Update to version 2007k (esp. Argentina DST change) [#350489]</changelog>
<changelog author="schwab@suse.de" date="1200484800">- Use RPM_OPT_FLAGS.</changelog>
<changelog author="pbaudis@suse.cz" date="1196942400">- Update to version 2007j (esp. Venezuela time shift)</changelog>
<changelog author="pbaudis@suse.cz" date="1191758400">- Update to version 2007h</changelog>
<changelog author="pbaudis@suse.cz" date="1189252800">- Fix %post script to work in patch RPMs as well</changelog>
<changelog author="pbaudis@suse.cz" date="1187697600">- Update to version 2007g</changelog>
<changelog author="pbaudis@suse.cz" date="1186574400">- Fix %post if /etc/localtime doesn't exist yet</changelog>
<changelog author="pbaudis@suse.cz" date="1186142400">- Split timezone package to a separate physical package</changelog>
<changelog author="aj@suse.de" date="1185537600">- Use fdupes to reduce timezone data size.</changelog>
<changelog author="schwab@suse.de" date="1184328000">- Update to head of glibc-2.6 branch.
- Fix update on ppc.</changelog>
<changelog author="matz@suse.de" date="1183032000">- Add a provide for &quot;rtld(GNU_HASH)&quot;.</changelog>
<changelog author="schwab@suse.de" date="1182081600">- Fix section selection in crt objects.</changelog>
<changelog author="pbaudis@suse.cz" date="1181217600">- Backport fix for crashing printf() of some invalid ldouble values</changelog>
<changelog author="pbaudis@suse.cz" date="1180526400">- Added few fixes from 2.6 CVS before 2.6.1 gets released</changelog>
<changelog author="pbaudis@suse.cz" date="1179489600">- Update glibc to version 2.6
- Update tzdata to version 2007f</changelog>
<changelog author="schwab@suse.de" date="1178280000">- Update build checks.</changelog>
<changelog author="dmueller@suse.de" date="1177070400">- only keep symtab for libpthread*</changelog>
<changelog author="pbaudis@suse.cz" date="1176984000">- Fix strtod() exponent limit calculations [#230909]
- Fix random nscd crashes under very heavy passwd/group queries
  load [#192391]
- Add some enums from CVS to sys/personality.h [#253710]
- Fix pthread_atfork()-induced hangs in threaded programs [#256237]
- Fix llrintl() on ppc64 [#241183]
- Fix makecontext() segfault [#249780]
- Fix potential dladdr() breakage [#241464]
- Fix some races in client programs with nscd garbage collection [#252138]</changelog>
<changelog author="pbaudis@suse.cz" date="1175256000">- Update localtime during timezone update [#239888]</changelog>
<changelog author="olh@suse.de" date="1174824000">- temporary disable powerpc cputuned libs to reduce turnaround time</changelog>
<changelog author="pbaudis@suse.cz" date="1171022400">- Update to the latest upstream timezone data [#231833]</changelog>
<changelog author="schwab@suse.de" date="1170417600">- Remove -ffortify.</changelog>
<changelog author="schwab@suse.de" date="1170331200">- Remove -fstack-protector.</changelog>
<changelog author="sbrabec@suse.cz" date="1170072000">- Removed references to /opt/gnome.</changelog>
<changelog author="olh@suse.de" date="1169726400">- link power4 to ppc970, link power6 to power6x
- Update the powerpc cpu-tuned environment to v0.05</changelog>
<changelog author="schwab@suse.de" date="1169467200">- Update ppc build check.</changelog>
<changelog author="pbaudis@suse.cz" date="1164369600">- Fix for Brazilian and Wester Australia timezone DSTs [#213375,#223196]</changelog>
<changelog author="pbaudis@suse.cz" date="1163678400">- Disable power6 optimization for 10.2, not all pieces are there
  [#219962]</changelog>
<changelog author="pbaudis@suse.cz" date="1161777600">- Change ld.so madvise() call to posix_fadvise()
- Fix mallopt(M_MXFAST,0) behaviour [#198760]
- Update the powerpc cpu-tuned environment to v0.04 [#215117]</changelog>
<changelog author="pbaudis@suse.cz" date="1161518400">- Update the powerpc cpu-tuned environment to v0.03 [#212549]
- Improve glibc powerpc optimization [#212548,#212580,#214282]</changelog>
<changelog author="mls@suse.de" date="1161086400">- add ldconfig-old-cache patch to speed up ldconfig</changelog>
<changelog author="olh@suse.de" date="1160827200">- dont use uninitialized (and wrong) variable in glibc-2.4.90-bdirect.diff
  [#212470]</changelog>
<changelog author="pbaudis@suse.cz" date="1160654400">- Update to the latest 2.5 CVS
- More friendly -Bdirect behaviour in case of missing libraries
- Fix 2.4.90-nscd patch wrt. new gcc</changelog>
<changelog author="aj@suse.de" date="1159790400">- Fix warnings in testsuite (patch from CVS).</changelog>
<changelog author="pbaudis@suse.cz" date="1159531200">- Update to 2.5 CVS - official release (only minimal changes in CVS
  since the last update)
- Fix a thinko in the -Bdirect patch</changelog>
<changelog author="dmueller@suse.de" date="1159531200">- fix devel requires</changelog>
<changelog author="pbaudis@suse.cz" date="1159531200">- Make the dynamic linker support direct bindings (Michael Meeks'
  Solaris-like -Bdirect with minor changes by me)
- Split the kernel headers to a new package (linux-kernel-headers)</changelog>
<changelog author="schwab@suse.de" date="1159358400">- Fix broken assertion [#208189].</changelog>
<changelog author="pbaudis@suse.cz" date="1159272000">- Fix mistake when removing some patches</changelog>
<changelog author="pbaudis@suse.cz" date="1159185600">- Update to current CVS</changelog>
<changelog author="pbaudis@suse.cz" date="1159012800">- Fix 64bit-cleanliness gcc warnings</changelog>
<changelog author="pbaudis@suse.cz" date="1158840000">- Add /usr/lib{,64}/Xaw3d to /etc/ld.so.conf (by schwab@suse.de,
  from original STABLE) [#205169]
- Fix chown() instead of lchown() called in fchownat() emulation
  [#201751]
- Fix glob() overflowing stack when producing massive number of
  matches [#190458]
- Update to current CVS</changelog>
<changelog author="pbaudis@suse.cz" date="1158753600">- Fix cut'n'paste error in a last-minute change</changelog>
<changelog author="pbaudis@suse.cz" date="1158753600">- Update to current CVS
- Fix powerpc-cpu tarball extension
- Move crypt-blowfish to a patch so that quilt works on the tree</changelog>
<changelog author="schwab@suse.de" date="1157198400">- Use asm-powerpc for ppc and ppc64.
- Fix chroot check in glibc_post_upgrade.</changelog>
<changelog author="pbaudis@suse.cz" date="1156766400">- Update to current CVS, should fix false positive heap overflow
  trigger from malloc() causing gcc to hang [#201724]</changelog>
<changelog author="pbaudis@suse.cz" date="1156334400">- Update the powerpc cpu-tuned environment to v0.02 [#199274]
- Update to current CVS
- Drop pthread_mutexattr_getprioceiling() out of range fix</changelog>
<changelog author="pbaudis@suse.cz" date="1155211200">Ported from STABLE:
- Remove libc5 reference from /etc/ld.so.conf, shlibs5 is no longer
  supported [#181947]
- Fix name of a dummy ia64 header from offsets.h to asm-offsets.h
  [#191394]</changelog>
<changelog author="pbaudis@suse.cz" date="1154260800">- Update to current CVS snapshot (highlight: support for .gnu.hash
  fast linking support)</changelog>
<changelog author="pbaudis@suse.cz" date="1152705600">- pthread_mutexattr_getprioceiling() was returning prioceiling out
  of range [#182782]</changelog>
<changelog author="pbaudis@suse.cz" date="1152705600">- Fix the HTML documentation missing an index [#190585]</changelog>
<changelog author="kukuk@suse.de" date="1151150400">- Update to current CVS snapshot
- Update to kernel-headers 2.6.17
- Remove HZ define (sysconf(_SC_CLK_TCK) instead)</changelog>
<changelog author="kukuk@suse.de" date="1150200000">- Update to current CVS snapshot</changelog>
<changelog author="pbaudis@suse.cz" date="1146571200">- Fix bad memset() size in NTPL code [#159184]</changelog>
<changelog author="kukuk@suse.de" date="1146571200">- asm-powerpc/page.h: Don't move #ifdef __KERNEL__ [#171010]
- bits/mman.h: Fix value of MADV_REMOVE [#170734]</changelog>
<changelog author="kukuk@suse.de" date="1145880000">- Fix china timezone mess [#163674]
- Don't include linux/stddef.h [#167964]</changelog>
<changelog author="schwab@suse.de" date="1145361600">- Sanitize &lt;asm-powerpc/sigcontext.h&gt;.</changelog>
<changelog author="kukuk@suse.de" date="1144929600">- Add /usr/include/linux/taskstats.h [#141936]</changelog>
<changelog author="kukuk@suse.de" date="1144756800">- nptl/init.c (sigcancel_handler): Compare with correct PID even
  if the thread is in the middle of a fork call.
  (sighandler_setxid): Likewise.</changelog>
<changelog author="ihno@suse.de" date="1144584000">- S390 fix for startupcode. Part of it was not PIC.</changelog>
<changelog author="kukuk@suse.de" date="1144411200">- Don't hardcode syscall numbers at our own</changelog>
<changelog author="schwab@suse.de" date="1144152000">- Fix readlink declaration.</changelog>
<changelog author="kukuk@suse.de" date="1144065600">- Update from CVS:
  - nscd bug fixes
  - Match return value of readlink to what POSIX says
  - Fix NIS+ checks for NULL pointer</changelog>
<changelog author="dmueller@suse.de" date="1143979200">- Fix clients crash if nscd is unresponsive (glibc-#2501)
- Fix fd leak in nscd daemon (glibc-#2498)</changelog>
<changelog author="schwab@suse.de" date="1143892800">- Fix &lt;sys/procfs.h&gt; on ppc64.</changelog>
<changelog author="schwab@suse.de" date="1143806400">- Extend last change also to ppc64.</changelog>
<changelog author="schwab@suse.de" date="1143374400">- Terminate FDE before clone syscall.</changelog>
<changelog author="ro@suse.de" date="1143201600">- kernel-headers: asm-powerpc: define PAGE_MASK in page.h</changelog>
<changelog author="kukuk@suse.de" date="1142856000">- Update to final 2.6.16 kernel headers
- Update to current CVS:
  - Don't use TLS before setting it up.
  - Fix rounding of long doubles on ppc64.
  - Correct usage of cfi_offset on ppc/ppc64.
  - Fix memory leak in dlopen.</changelog>
<changelog author="schwab@suse.de" date="1142337600">- Update fnmatch patch.</changelog>
<changelog author="kukuk@suse.de" date="1141992000">- Disable unshare() syscall (request of kernel developer)</changelog>
<changelog author="kukuk@suse.de" date="1141992000">- Don't include linux/interrupt.h from linux/rtc.h
- Revert last change to linux/input.h, disable struct
- Update to current CVS (nptl/ia64 fix)</changelog>
<changelog author="kukuk@suse.de" date="1141905600">- Fix linux/input.h for userspace inclusion</changelog>
<changelog author="kukuk@suse.de" date="1141819200">- Update kernel headers to 2.6.16-rc5</changelog>
<changelog author="kukuk@suse.de" date="1141646400">- Update to 2.4 CVS
  - official release
  - Fix free on ppc [#155374]
  - Various sysconf() fixes</changelog>
<changelog author="kukuk@suse.de" date="1141473600">- Update to CVS
  - ldconfig/prelink fixes</changelog>
<changelog author="aj@suse.de" date="1141387200">- Do not leave hyphens in defines in create_biarch_asm.sh (Bug 154998).</changelog>
<changelog author="kukuk@suse.de" date="1141387200">- Update to CVS
  - Fix ftw test suite failures
  - Fix alignment of malloc for long double</changelog>
<changelog author="kukuk@suse.de" date="1141300800">- Update to 2.3.91 CVS
  - Fix 6arg syscall on s390x
  - memccpy fix on IA64</changelog>
<changelog author="kukuk@suse.de" date="1141214400">- Update to CVS
  - New linkat interface
  - Update from tzdata2006b
  - Define MADV_DONTFORK and MADV_DOFORK.
  - Add robust mutex to NPTL</changelog>
<changelog author="kukuk@suse.de" date="1140696000">- Reenable power optimized code again [#142839]</changelog>
<changelog author="kukuk@suse.de" date="1139745600">- Disable power optimized code</changelog>
<changelog author="kukuk@suse.de" date="1139486400">- Update to CVS
  - Add unshare prototype
  - Add memory barrier on i386/NPTL</changelog>
<changelog author="kukuk@suse.de" date="1139400000">- Remove glibc-2.4-ppc-dl-procinfo-20060111.diff [#142839]</changelog>
<changelog author="kukuk@suse.de" date="1139227200">- Update to current CVS
- Fix alternate locale search path patch [#147685]</changelog>
<changelog author="kukuk@suse.de" date="1138881600">- Update to current CVS</changelog>
<changelog author="schwab@suse.de" date="1138622400">- Fix the fix.</changelog>
<changelog author="kukuk@suse.de" date="1138449600">- Fix seg.fault in __atfct_seterrno if called from futimesat()
- Apply patches for CPU-Tuned Environment on Power [#142839]</changelog>
<changelog author="kukuk@suse.de" date="1138363200">- Cleanup ld.so.conf</changelog>
<changelog author="kukuk@suse.de" date="1138276800">- Add alternate directory for translations [#144073]</changelog>
<changelog author="mls@suse.de" date="1138276800">- converted neededforbuild to BuildRequires</changelog>
<changelog author="kukuk@suse.de" date="1138017600">- Update to CVS
- Fix build_locales</changelog>
<changelog author="kukuk@suse.de" date="1137844800">- Update to CVS
- Fix inclusion of sys/poll.h with _GNU_SOURCE defined</changelog>
<changelog author="kukuk@suse.de" date="1137758400">- Update to CVS</changelog>
<changelog author="kukuk@suse.de" date="1137326400">- Update to CVS (fix long double configure check)</changelog>
<changelog author="schwab@suse.de" date="1137326400">- Readd &lt;fmtmsg.h&gt;, &lt;ucontext.h&gt;, &lt;sys/ucontext.h&gt;.</changelog>
<changelog author="schwab@suse.de" date="1137326400">- Readd &lt;alloca.h&gt;.</changelog>
<changelog author="kukuk@suse.de" date="1137240000">- Update to current CVS (long double support)</changelog>
<changelog author="aj@suse.de" date="1137153600">- Fix x86-64 w_exp to not use extra plt.</changelog>
<changelog author="kukuk@suse.de" date="1137067200">- Fix asm-s390/setup.h for userspace inclusion
- nsswitch.conf: Add nis to netgroup and automount entry
- Fix sys/procfs.h for ppc64</changelog>
<changelog author="kukuk@suse.de" date="1136808000">- Update to current CVS (fix for pthread.h with -std=c99)
- Define PAGE_SIZE on POWER
- Don't include linux/sched.h in asm-power/elf.h</changelog>
<changelog author="kukuk@suse.de" date="1136721600">- Fix linux/acct.h for userland inclusion</changelog>
<changelog author="kukuk@suse.de" date="1136721600">- Update to current CVS
- Remove CHILD_MAX from kernel-headers
- Copy subdirectories of asm-power, too.
- Remove da_DK@euro (does not exist)</changelog>
<changelog author="kukuk@suse.de" date="1136635200">- Fix ext2 kernel headers
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1136548800">- Update to kernel headers 2.6.15</changelog>
<changelog author="kukuk@suse.de" date="1136548800">- Update crypt_blowfish to version 1.0
- Update to current CVS
- Adjust nscd patches</changelog>
<changelog author="aj@suse.de" date="1136289600">- Update to current CVS to fix pthread.h on 64-bit systems for C++.</changelog>
<changelog author="aj@suse.de" date="1136289600">- Enable string patch again.
- Update to current CVS.</changelog>
<changelog author="kukuk@suse.de" date="1135166400">- Update to current CVS
- Fix ldconfig</changelog>
<changelog author="kukuk@suse.de" date="1134820800">- Remove /usr/lib/zoneinfo
- Add /etc/localtime to filelist
- Update to current CVS
- Fix glibc #1978: statvfs does not know about current filesystems
- Fix wrong error return code of time() on x86
- Remove nscd_nischeck
- Remove audit from nfb
- Remove LinuxThreads</changelog>
<changelog author="kukuk@suse.de" date="1134561600">- Update to current CVS
- Remove nscd_nischeck
- Remove audit from nfb</changelog>
<changelog author="kukuk@suse.de" date="1133784000">- Update to current CVS
- Disable SELinux</changelog>
<changelog author="kukuk@suse.de" date="1132833600">- Remove obsolete patches:
  - glibc-2.3.asprintf-error_handling.diff
  - glibc-2.3.90-missing-string_h.diff</changelog>
<changelog author="kukuk@suse.de" date="1132747200">- Update to current CVS
- Don't install in parallel</changelog>
<changelog author="kukuk@suse.de" date="1132315200">- Update to current CVS to fix compiling with new binutils</changelog>
<changelog author="kukuk@suse.de" date="1132142400">- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1131192000">- Update to current CVS
- Disable linuxthreads on POWER and Itanium
- Fix kernel-headers for userland inclusion</changelog>
<changelog author="kukuk@suse.de" date="1130932800">- Update to current CVS
- Update to kernel-headers 2.6.14</changelog>
<changelog author="kukuk@suse.de" date="1129636800">- Update to current CVS</changelog>
<changelog author="schwab@suse.de" date="1128168000">- Update libm ULPs.
- Fix limit in getcwd.</changelog>
<changelog author="kukuk@suse.de" date="1126785600">- Update to current CVS
- Update to final 2.6.13 kernel headers
- Adjust bindresvport.blacklist patch to check already ports &gt;= 512</changelog>
<changelog author="kukuk@suse.de" date="1125057600">- Update to current CVS
- init.d/nscd: Remove -S support (was removed from nscd)</changelog>
<changelog author="schwab@suse.de" date="1124452800">- Fix comment.</changelog>
<changelog author="matz@suse.de" date="1124452800">- Change .note.SuSE format [#105825].</changelog>
<changelog author="kukuk@suse.de" date="1124452800">- Update to current CVS
- Move all obsolete libraries into own subpackage and document
  them as obsolete</changelog>
<changelog author="schwab@suse.de" date="1123243200">- -mno-tls-direct-seg-refs is x86-only</changelog>
<changelog author="kukuk@suse.de" date="1122984000">- Update to 2.3.x CVS branch
- Compile with -mno-tls-direct-seg-refs</changelog>
<changelog author="kukuk@suse.de" date="1122638400">- Update to current CVS head</changelog>
<changelog author="schwab@suse.de" date="1122465600">- Update libm ULPs for ia64.
- Add linuxthreads stack guard support for ia64.</changelog>
<changelog author="kukuk@suse.de" date="1122120000">- Update to current CVS head (adds bits/wchar2.h)
- Move LinuxThreads version to obsolete/linuxthreads</changelog>
<changelog author="kukuk@suse.de" date="1121947200">- Update to current CVS head</changelog>
<changelog author="schwab@suse.de" date="1121428800">- Fix file list.</changelog>
<changelog author="aj@suse.de" date="1121428800">- Fix amd64 string routines and math routines.</changelog>
<changelog author="kukuk@suse.de" date="1121428800">- Use old LinuxThreads only for runtime and remove static version
  and headers
- Update to current CVS head
- Remove own texi2html</changelog>
<changelog author="kukuk@suse.de" date="1121083200">- Install generic stdio-lock.h header file</changelog>
<changelog author="kukuk@suse.de" date="1120910400">- Temporary disable AMD64 string optimization</changelog>
<changelog author="kukuk@suse.de" date="1120651200">- Build and install ja_JP.SHIFT_JISX0213 locale [Bug #84030]</changelog>
<changelog author="kukuk@suse.de" date="1120478400">- nss_compat: Preserve original return value [Bug #95033]
- Cleanup old Obsoletes/Requires</changelog>
<changelog author="kukuk@suse.de" date="1119873600">- Update to current gilbc CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1119528000">- Update to current glibc CVS snapshot
- Adjust nscd patch
- Enable SELinux/audit support for nscd
- Update .note.SuSE version</changelog>
<changelog author="kukuk@suse.de" date="1119268800">- Update to final 2.6.12 kernel headers
- Update to current glibc CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1118923200">- Update linux/audit.h header
- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1118664000">- Don't terminate strings twice in nis/netgroup code.
- netinet/if_tr.h: don't include kernel headers.</changelog>
<changelog author="kukuk@suse.de" date="1118232000">- Update to kernel-headers 2.6.12-rc6
- Fix build on s390 and s390x</changelog>
<changelog author="matz@suse.de" date="1118232000">- Don't strip .symtab from libpthread.so.0 (and other libs).
  Fixes debugging of threaded programs (#81253).</changelog>
<changelog author="kukuk@suse.de" date="1118059200">- Update to current CVS head
- Update to kernel-headers 2.6.12-rc5</changelog>
<changelog author="schwab@suse.de" date="1117108800">- No longer build loadlocale.c with -fno-unit-at-a-time.</changelog>
<changelog author="kukuk@suse.de" date="1116936000">- Update to current CVS head, obsoletes:
  - glibc-2.3.90-libm.diff
  - glibc-2.3.90-i386-sysdep.diff
  - warn.diff
  - dl-osinfo.diff
  Adjusted:
  - glibc-2.3.90-bindresvport.blacklist.diff</changelog>
<changelog author="schwab@suse.de" date="1116763200">- Fix missing include.</changelog>
<changelog author="schwab@suse.de" date="1116331200">- Fix warning.</changelog>
<changelog author="kukuk@suse.de" date="1114776000">- Update to latest CVS snapshost</changelog>
<changelog author="kukuk@suse.de" date="1114257600">- Fix all the archs using wrong FLAGS</changelog>
<changelog author="kukuk@suse.de" date="1114257600">- Remove -D_FORTIFY_SOURCE from RPM_OPT_FLAGS</changelog>
<changelog author="kukuk@suse.de" date="1114171200">- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1114171200">- Check if nice value does not conflict with test suite</changelog>
<changelog author="mls@suse.de" date="1113912000">- resolv: trigger re-read of /etc/resolv.conf for all threads if
  a change is detected
- nscd: support a negative timeout of zero, used by hosts cache</changelog>
<changelog author="meissner@suse.de" date="1113825600">- Enable fortify possibility even for GCC 4.0, we apply
  the necessary patch to the SUSE GCC 4.0.</changelog>
<changelog author="aj@suse.de" date="1113652800">- Apply amd64 string diff again.</changelog>
<changelog author="kukuk@suse.de" date="1113307200">- Update kernel-headers to 2.6.10
- Update to current CVS snapshot</changelog>
<changelog author="schwab@suse.de" date="1112788800">- Cleanup neededforbuild.</changelog>
<changelog author="aj@suse.de" date="1112702400">- Add gettext-devel to neededforbuild.</changelog>
<changelog author="aj@suse.de" date="1112702400">- Do not build on xen machines.
- Adjust libm ULPs for PowerPC.</changelog>
<changelog author="kukuk@suse.de" date="1112356800">- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1112097600">- Update to current CVS snapshot
- Fix compiler warnings on ix86</changelog>
<changelog author="kukuk@suse.de" date="1112011200">- Update to current CVS snapshot
- Disable Noversion Patch on i386 temporary</changelog>
<changelog author="ro@suse.de" date="1111147200">- check-build.sh: require 2.6.11 on x86,x86_64 for build</changelog>
<changelog author="mls@suse.de" date="1111060800">- nscd: enable hosts cache
- nscd: also watch /etc/resolv.conf
- nscd: check files every 3 seconds
- nscd: deal correctly with missing files</changelog>
<changelog author="kukuk@suse.de" date="1110888000">- Update to current CVS snapshot.</changelog>
<changelog author="schwab@suse.de" date="1108209600">- Remove const from __pthread_internal_tsd_address.</changelog>
<changelog author="schwab@suse.de" date="1108123200">- Update to current CVS.
- Link glibc_post_upgrade against new libc.
- Fix build error with gcc4.</changelog>
<changelog author="kukuk@suse.de" date="1107950400">- Update to current CVS
- Fix bindresvport blacklist handling.
- Increase buffer in tst-cancel17 to match new kernel buffer size
  [#50277]
- Enable LinuxThreads again
- Remove ia64-audit patch (is upstream)</changelog>
<changelog author="aj@suse.de" date="1107777600">- Add patch to allow compilation with gcc4.</changelog>
<changelog author="schwab@suse.de" date="1107172800">- Readd support for LD_AUDIT on ia64.</changelog>
<changelog author="kukuk@suse.de" date="1107172800">- Add memory clobber to string inline assemblies on s390 [#50284].</changelog>
<changelog author="kukuk@suse.de" date="1107172800">- Fix filelist on i686 if we build NPTL only version</changelog>
<changelog author="aj@suse.de" date="1107172800">- Generate new ULPs file for i386 needed by GCC 4.</changelog>
<changelog author="kukuk@suse.de" date="1107086400">- Include own copy of texi2html
- Add glibc_pst_upgrade program (based on version from FC3)
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1106827200">- Re-add patch for timezone/zic.c (got lost with last merge)</changelog>
<changelog author="kukuk@suse.de" date="1106740800">- Update timezone data to 2005c release (fixes zdump crash on
  64bit architectures)</changelog>
<changelog author="schwab@suse.de" date="1106395200">- Add basic (incomplete) support for LD_AUDIT on ia64.</changelog>
<changelog author="kukuk@suse.de" date="1106308800">- Enable patch for [Bug #49833]
- Allow to build NPTL only glibc
- Update to CVS from Jan 16, 2005, containing:
- Fix execlp argument in SunRPC code [glibc #681]
- Fix errno return values for futimes [glibc #633]
- Update FPU function on PPC/PPC64 [Bug #49764]</changelog>
<changelog author="aj@suse.de" date="1105963200">- Enable amd64 string patch again after fixing failing hunks.
- Handle missing cpuid better for amd64 string functions. [#49803]</changelog>
<changelog author="aj@suse.de" date="1105790400">- Fix amd64 string patch to use correct datatype.</changelog>
<changelog author="kukuk@suse.de" date="1105704000">- Fix memory corruption in getgrouplist function [Bug #49833]</changelog>
<changelog author="kukuk@suse.de" date="1105444800">- Enable all LinuxThreads tests again
- Finalize getconf -a patch (make it compatible with Solaris)
- Rewrite getconf manual page and mention new option
- Merge GB18030 patches into one.</changelog>
<changelog author="kukuk@suse.de" date="1104408000">- Merge kernel-headers.remove-SO_BSDCOMPAT.diff with
  kernel-headers.SuSE.diff
- Revert nscd paths on old SuSE Linux distributions</changelog>
<changelog author="kukuk@suse.de" date="1104321600">- Update to glibc 2.3.90 CVS branch
- Remove alarm-round.patch (merged upstream)</changelog>
<changelog author="kukuk@suse.de" date="1102593600">- Update to current CVS
- Move nscd persistent database files back to /var/run/nscd</changelog>
<changelog author="kukuk@suse.de" date="1102334400">- Update to current CVS
- Fix more kernel headers for userland inclusion</changelog>
<changelog author="ro@suse.de" date="1101470400">- kernel-headers.diff: define __force in compiler.h</changelog>
<changelog author="schwab@suse.de" date="1101384000">- Add Intel libm update.</changelog>
<changelog author="kukuk@suse.de" date="1101384000">- Update to current glibc CVS
- Update kernel headers to 2.6.9</changelog>
<changelog author="kukuk@suse.de" date="1100779200">- Update to current glibc CVS</changelog>
<changelog author="kukuk@suse.de" date="1100520000">- Update to current glibc CVS</changelog>
<changelog author="kukuk@suse.de" date="1099915200">- Blacklist port 921 (lwresd) for usage by bindresvport()
- Update to current glibc CVS
- Add /var/run/nscd/* files as ghost entries</changelog>
<changelog author="aj@suse.de" date="1098100800">- Don't use special fdim functions for x86-64 since those give
  wrong results for fdim (inf,inf).
- Fix ppc64 rebuild issue with ppc32 system [#47325].</changelog>
<changelog author="kukuk@suse.de" date="1097668800">- Fix symlink librt.so -&gt; tls/librt.so.1
- Backout last glob changes
- Disable nptl as default for linking</changelog>
<changelog author="kukuk@suse.de" date="1097582400">- Install kernel-headers after merging linuxthreads/NPTL headers</changelog>
<changelog author="kukuk@suse.de" date="1097582400">- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1097496000">- Make NPTL default for linking</changelog>
<changelog author="kukuk@suse.de" date="1096632000">- Update to current CVS snapshot
- Add workaround for linuxthreads/without-__threads bug
- Remove KDE/ldconfig workaround
- Set SuSE ABI note to 9.3</changelog>
<changelog author="kukuk@suse.de" date="1096200000">- Add lib/nptl/librt.so symlink to tls/librt.so.1
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1096113600">- Implement mq support for rtkaio and enable it again</changelog>
<changelog author="kukuk@suse.de" date="1096027200">- Add zh_SG.UTF-8 [Bug #46024]</changelog>
<changelog author="kukuk@suse.de" date="1095940800">- Sync sys/mount.h and linux/fs.h</changelog>
<changelog author="kukuk@suse.de" date="1095854400">- Make mdns support configurable in /etc/host.conf</changelog>
<changelog author="kukuk@suse.de" date="1095681600">- Fix invalidating of nscd caches and getaddrinfo()</changelog>
<changelog author="kukuk@suse.de" date="1095422400">- Update to current CVS (nscd and glob.h fixes)</changelog>
<changelog author="kukuk@suse.de" date="1095336000">- Fix getaddrinfo/nscd support</changelog>
<changelog author="kukuk@suse.de" date="1095249600">- Update to current CVS, remove merged patches</changelog>
<changelog author="kukuk@suse.de" date="1094990400">- Update to CVS: Fix nscd crash if one service is disabled
- glob.h: Add workaround for invalid prototypes
- nss_compat: Check that buffer is larger than 0 bytes</changelog>
<changelog author="kukuk@suse.de" date="1094817600">- Update to CVS: Fix cdefs.h for C++ usage</changelog>
<changelog author="kukuk@suse.de" date="1094817600">- Add lwres to hosts search order in nsswitch.conf
- Update to current CVS
- Use new nscd paths for socket/pid file
- Enable NPTL on i586
- Add --print-all option to getconf</changelog>
<changelog author="kukuk@suse.de" date="1094126400">- Fix NPTL header files on x86-64 for 32bit compilation
- Apply various fixes from CVS
- Remove pre-Install for -devel package (no longer necessary)</changelog>
<changelog author="kukuk@suse.de" date="1093435200">- Don't compile in eval.c</changelog>
<changelog author="kukuk@suse.de" date="1093262400">- Update to current CVS:
  - Use CVS version for last fix.
  - Add malloc sanity checks for double free.</changelog>
<changelog author="schwab@suse.de" date="1093003200">- Fix cancellable syscalls in librt w/ linuxthreads.</changelog>
<changelog author="kukuk@suse.de" date="1093003200">- Update to current CVS [#43993]</changelog>
<changelog author="schwab@suse.de" date="1092916800">- Better fix for asm-ia64/gcc_intrin.h.</changelog>
<changelog author="kukuk@suse.de" date="1092830400">- Update to current CVS
- Workaround linux/ixjuser.h problem not including compiler.h
- Workaround linux/capi.h problem not including compiler.h</changelog>
<changelog author="schwab@suse.de" date="1092744000">- Fix asm-ia64/gcc_intrin.h.</changelog>
<changelog author="kukuk@suse.de" date="1092744000">- Workaround broken linux/crc-ccitt.h for usage from glibc [#43884]</changelog>
<changelog author="kukuk@suse.de" date="1092657600">- Update to current CVS version and update to
  kernel-headers 2.6.8.1 to fix NPTL deadlock problems
- Disable linuxthreads/tst-clock1, does not work on i586 and lower</changelog>
<changelog author="kukuk@suse.de" date="1092398400">- Update to current CVS version
- Cleanup/adjust all patches</changelog>
<changelog author="kukuk@suse.de" date="1087473600">- Fix sched_setaffinity return/errno code in error case [#42124]</changelog>
<changelog author="meissner@suse.de" date="1087387200">- Updated altivec set/get/swapcontext patch to fix
  more problems on altivec capable machines [#42039].
- glibc is also able to build on -pmac64 kernels.</changelog>
<changelog author="kukuk@suse.de" date="1087214400">- Add fixes from CVS:
  - sysconf return value fixes
  - nscd host caching deadlock
  - backtrace for s390/s390x/ia64 static linked binaries</changelog>
<changelog author="kukuk@suse.de" date="1087214400">- Increase listen backlog in RPC code [#41955]</changelog>
<changelog author="meissner@suse.de" date="1086782400">- Fixed typos in powerpc* *context functions to not destroy the r19
  register and save the v19 register correctly. [#41790]</changelog>
<changelog author="aj@suse.de" date="1086436800">- Fix makecontext with more than 6 arguments on x86-64 [#40546].</changelog>
<changelog author="kukuk@suse.de" date="1085400000">- Update to kernel-headers 2.6.6
- Update to current glibc CVS
- Disable rtkaio temporary</changelog>
<changelog author="kukuk@suse.de" date="1085313600">- Fix pthread_cond_wait on not ix86 and x86-64 architectures</changelog>
<changelog author="kukuk@suse.de" date="1085054400">- Add PPC64 kernel header file fixes [#40831,#40870]</changelog>
<changelog author="kukuk@suse.de" date="1084968000">- Add additional NPTL fixes from CVS</changelog>
<changelog author="schwab@suse.de" date="1084881600">- Fix mapping of DSOs with holes.</changelog>
<changelog author="schwab@suse.de" date="1084536000">- Fix rounding in alarm [#40552].</changelog>
<changelog author="schwab@suse.de" date="1084363200">- Fix uninitialized array in regexp compiler [#40009].</changelog>
<changelog author="kukuk@suse.de" date="1084276800">- Apply lot of fixes from current CVS
- Fix alignment of stack for makecontext on x86-64 [Bug #39413]
- Make XTABS identical to TABDLY on PPC</changelog>
<changelog author="kukuk@suse.de" date="1083758400">- Add some header fixes to match POSIX</changelog>
<changelog author="meissner@suse.de" date="1083672000">- Fix INLINE_SYSCALL on ppc and ppc64 (see #38399)</changelog>
<changelog author="kukuk@suse.de" date="1083585600">- Port --mlock option for ld.so from UL1 [Bug #39569]</changelog>
<changelog author="kukuk@suse.de" date="1082462400">- Add execstack fix for s390</changelog>
<changelog author="kukuk@suse.de" date="1082376000">- Update to current CVS version (fix problems with new binutils
  and gcc)</changelog>
<changelog author="kukuk@suse.de" date="1082376000">- Add pthread_getattr_np and syslog fixes from CVS
- Update gb18030 and big5hkscs gconv modules [Bug #39080]</changelog>
<changelog author="schwab@suse.de" date="1082203200">- Pacify autobuild.</changelog>
<changelog author="kukuk@suse.de" date="1082030400">- Add /etc/ld.so.conf.d/*.conf to /etc/ld.so.conf
- Disable FUTEX_REQUEUE support in NPTL library [Bug #38882]</changelog>
<changelog author="schwab@suse.de" date="1081944000">- Remove /usr/i386-linux from ld.so.conf,</changelog>
<changelog author="kukuk@suse.de" date="1081944000">- Fix linux/compiler.h for glibc inclusion
- Really fix ffsl on s390x</changelog>
<changelog author="schwab@suse.de" date="1081512000">- Fix syntax error in memcmp.</changelog>
<changelog author="kukuk@suse.de" date="1081512000">- Update from CVS: linuxthread debug fixes
- Fix INLINE_SYSCALL on x86-64 and ia64 (fixes #38399)
- Fix ffsl weak alias on s390x
- Update to 2.6.5 kernel headers</changelog>
<changelog author="meissner@suse.de" date="1081339200">- forward umount to umount2 on ppc64 because umount syscall
  does not exist</changelog>
<changelog author="kukuk@suse.de" date="1081166400">- Sync with current CVS (which is nearly identical with most of
  our latest patches)</changelog>
<changelog author="kukuk@suse.de" date="1080907200">- Make fstatvfs64 working on 32bit architectures
- Add fwrite LFS fix from aj
- Add powerpc fixes from CVS
- Fix wrong errno code for shm_unlink [Bug #38013]</changelog>
<changelog author="kukuk@suse.de" date="1080734400">- Add three fixes from CVS:
  - Call __nptl_deallocate_tsd for main thread, too
  - setgroups: optimizations for huge number of groups
  - initgroups: Limit the initial allocation to 64 entries</changelog>
<changelog author="kukuk@suse.de" date="1080648000">- Add IUTF8 to bits/termios.h [Bug #34725]
- *affinitiy.c: Prepend GLIBC_ to version names</changelog>
<changelog author="kukuk@suse.de" date="1080388800">- Fix wrong return value of getXXbyYY_r in case key was not
  found [Bug #37181]
- Fix typo in dl-open
- Don't set errno in NSS NIS module if group was not found</changelog>
<changelog author="aj@suse.de" date="1080302400">- Add pow10/pow10f aliases for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1080216000">- Update to latest CVS snapshot</changelog>
<changelog author="aj@suse.de" date="1079784000">- Fix further problems with sched_[sg]etaffinity calls.</changelog>
<changelog author="aj@suse.de" date="1079697600">- Fix sched_setaffinity compile problem.</changelog>
<changelog author="kukuk@suse.de" date="1079697600">- Remove conflict with special aaa_base version (rpm will handle
  this with file conflict)</changelog>
<changelog author="kukuk@suse.de" date="1079697600">- Add SuSE abi note
- Add madvise patch
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1079524800">- Use official NPTL version fix
- Add LD_DEBUG=statistic for x86-64
- Fix two JB_SIZE redefinitions on PPC
- Add two fixes for execstack</changelog>
<changelog author="kukuk@suse.de" date="1079352000">- Require kernel 2.6.4 for glibc/NPTL
- Remove siginfo_t/si_band patch (needs to be fixed in kernel)
- Update linuxthreads_db and nptl_db
- Add libidn fixes from CVS</changelog>
<changelog author="kukuk@suse.de" date="1079179200">- Adjust filelist (remove libcidn.a and libcidn_p.a)</changelog>
<changelog author="kukuk@suse.de" date="1079179200">- Update to current CVS (merge of patches)
- Fix siginfo_t/si_band [Bug #34330]</changelog>
<changelog author="mls@suse.de" date="1079006400">- Add mdns support to resolver library</changelog>
<changelog author="kukuk@suse.de" date="1079006400">- Update kernel headers to 2.6.4
- Update to current glibc CVS</changelog>
<changelog author="bg@suse.de" date="1078920000">- Update hppa patches.</changelog>
<changelog author="kukuk@suse.de" date="1078747200">- Fix vDSO on IA64</changelog>
<changelog author="kukuk@suse.de" date="1078747200">- Update from glibc CVS:
  - Add libidn
  - Lot of dynamic loader changes</changelog>
<changelog author="kukuk@suse.de" date="1078401600">- Update from glibc CVS:
  - Fix posix_fadvise vs. posix_fadvise64</changelog>
<changelog author="kukuk@suse.de" date="1078228800">- Fix PPC kernel header files
- Update from glibc CVS
  - NPTL fixes
  - nscd fixes</changelog>
<changelog author="schwab@suse.de" date="1078228800">- Fix ppc32 to always use stat64 syscall.</changelog>
<changelog author="kukuk@suse.de" date="1077969600">- Update from glibc CVS:
  - Fix compiler warnings
  - NPTL: Don't use CLONE_STOPPED
  - Revert vDSO changes</changelog>
<changelog author="kukuk@suse.de" date="1077883200">- Update from glibc CVS:
  - Real NGROUP_MAX fix
  - Lot of NPTL fixes
  - clock_settime fix
- Add no_NO back (required by OpenI18N spec and [Bug #34745])</changelog>
<changelog author="kukuk@suse.de" date="1077796800">- Workaround broken NGROUP_MAX function</changelog>
<changelog author="kukuk@suse.de" date="1077796800">- Add insserv PreRequires for nscd
- Update from CVS: NPTL and getaddrinfo memory leak fixes,
  Get NGROUP_MAX from /proc filesystem</changelog>
<changelog author="kukuk@suse.de" date="1077364800">- Update from CVS: IA64 relo fix, lot of PPC fixes
- Fix linux/mod_devicetable.h for userland inclusion
- Enable NPTL on Alpha</changelog>
<changelog author="schwab@suse.de" date="1077278400">- Fix pthread_barrier_wait.</changelog>
<changelog author="kukuk@suse.de" date="1077192000">- Update from CVS: More NPTL fixes
- nscd.init: Cleanups</changelog>
<changelog author="kukuk@suse.de" date="1077105600">- Kernel Headers: Fix asm-ppc/unaliged.h, asm-ppc/types.h and
  asm-ppc/bitops.h for userland inclusion.</changelog>
<changelog author="bg@suse.de" date="1077105600">- Update hppa patches for current glibc
- Add workaround for ICE in hppa</changelog>
<changelog author="kukuk@suse.de" date="1077019200">- Update from CVS:
  - PPC nptl compatiblity fix
  - NSCD patches merged
  - ld.so.preload: Igreno missing files
  - getaddrinfo: Fix problem with IPv6 addresses</changelog>
<changelog author="aj@suse.de" date="1077019200">- Fix string optimizations init code on AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1076760000">- Update from CVS (for NPTL fixes and new PPC longjmp)
- Fix nscd deadlock with kernel 2.6 [Bug #34507]</changelog>
<changelog author="aj@suse.de" date="1076673600">- Add more string/memory optimizations for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1076587200">- Fix regex bug with invalid UTF-8 strings</changelog>
<changelog author="aj@suse.de" date="1076587200">- Add more string optimizations for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1076500800">- Update to current CVS snapshot
- Fix _IOC_TYPECHECK on s390/s390x/parisc
- Compile rtkaio only with NPTL
- Remove glibcbug (was dropped since glibc uses bugzilla now)
- Disable parallel build on s390x</changelog>
<changelog author="schwab@suse.de" date="1076414400">- Work around invalid use of kernel headers in some packages.</changelog>
<changelog author="kukuk@suse.de" date="1076068800">- Add kernel stat fix for PPC
- Add fix for off-by-one error in regex code</changelog>
<changelog author="kukuk@suse.de" date="1075982400">- Update kernel header files to 2.6.2</changelog>
<changelog author="bg@suse.de" date="1075809600">- Update hppa patch</changelog>
<changelog author="kukuk@suse.de" date="1075809600">- Fix ypclnt speedup patch
- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1075118400">- Update to current CVS snapshot</changelog>
<changelog author="aj@suse.de" date="1074686400">- Do not run in parallel on s390.</changelog>
<changelog author="ro@suse.de" date="1074513600">- really fix linux/percpu.h to compile in userland</changelog>
<changelog author="kukuk@suse.de" date="1074254400">- Update version.h to 2.6.1
- Fix linux/percpu.h to compile in userland
- Update to current CVS snapshot
- Revert nscd path changes</changelog>
<changelog author="kukuk@suse.de" date="1074081600">- Update to Kernel Headers 2.6.1
- Update to current CVS snapshot
- Don't ignore make check on IA64 any longer</changelog>
<changelog author="schwab@suse.de" date="1073736000">- Locale no_NO has been renamed to nb_NO.</changelog>
<changelog author="kukuk@suse.de" date="1073649600">- Temporary ignore make check on IA64 and PPC
  (known kernel/compiler bugs)</changelog>
<changelog author="stepan@suse.de" date="1073649600">- fix v4l2 headers</changelog>
<changelog author="kukuk@suse.de" date="1073476800">- Update to glibc CVS from 20040107
- Remove manual pages which are now part of man-pages</changelog>
<changelog author="kukuk@suse.de" date="1071748800">- Update to glibc CVS from 20031218
- Update ot final 2.6.0 kernel headers
- Fix syntax error in spec file
- Update HPPA patch</changelog>
<changelog author="kukuk@suse.de" date="1071489600">- Update to glibc CVS from 20031215</changelog>
<changelog author="kukuk@suse.de" date="1071230400">- Update to glibc CVS from 20031212
- disable rtkaio (does not work with kernel 2.6 yet)</changelog>
<changelog author="kukuk@suse.de" date="1070625600">- Update to glibc 2.3.3 CVS
- Make an extra sub package for nscd</changelog>
<changelog author="kukuk@suse.de" date="1069934400">- Update to glibc CVS from 20031127
- Add nsswitch.conf (moved from aaa_base)
- Add ld.so.conf (moved from aaa_base) [Bug #33277]
- Fix ceil on AMD64</changelog>
<changelog author="kukuk@suse.de" date="1069416000">- Update to glibc CVS from 20031121
- Obsolete epoll (glibc-devel contains now this header files)</changelog>
<changelog author="kukuk@suse.de" date="1069243200">- Add patch so that ld.so supports linuxthreads and nptl
- PPC64 requires kernel 2.4.21
- Update to glibc CVS from 20031119</changelog>
<changelog author="bg@suse.de" date="1068811200">- Add hppa patches for current glibc.</changelog>
<changelog author="kukuk@suse.de" date="1068811200">- Update to glibc CVS from 20031114
- Remove PPC64 symbol version patch</changelog>
<changelog author="schwab@suse.de" date="1068724800">- Fix last change covering libNoVersion.</changelog>
<changelog author="schwab@suse.de" date="1068465600">- Specfile cleanup.</changelog>
<changelog author="kukuk@suse.de" date="1068120000">- Update to glibc CVS from 20031106</changelog>
<changelog author="uli@suse.de" date="1068033600">- added a number of ARM fixes (glibc-2.3.2-armformat.patch,
  glibc-armisa.patch, glibc-sjlj.patch)</changelog>
<changelog author="kukuk@suse.de" date="1067256000">- Update to glibc CVS from 20031027
- kernel headers: update to 2.6.0-test9
- nptl: Use -fno-unit-at-a-time on AMD64, too</changelog>
<changelog author="kukuk@suse.de" date="1066910400">- Update to current CVS version</changelog>
<changelog author="kukuk@suse.de" date="1066824000">- nptl: Fix prototype in configure script
- nptl: Use -fno-unit-at-a-time
- locale: Add nb_NO</changelog>
<changelog author="kukuk@suse.de" date="1066392000">- Increase timeout for make check on overloaded architectures</changelog>
<changelog author="kukuk@suse.de" date="1066305600">- Fix building as normal user</changelog>
<changelog author="kukuk@suse.de" date="1066219200">- Fix putpwent/putgrent
- Make build as normal user</changelog>
<changelog author="kukuk@suse.de" date="1066132800">- Update to glibc CVS from 20031014</changelog>
<changelog author="aj@suse.de" date="1066132800">- Fix w_acosf for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1066132800">- Fix asm-sparc/kbio.h to compile kbdrate/X11</changelog>
<changelog author="kukuk@suse.de" date="1066046400">- Update to kernel header files from 2.6.0-test7</changelog>
<changelog author="schwab@suse.de" date="1065787200">- Fix misnamed syscalls.</changelog>
<changelog author="kukuk@suse.de" date="1065528000">- Update to glibc CVS from 20031007</changelog>
<changelog author="kukuk@suse.de" date="1065182400">- Update to glibc CVS from 20031003
- Fix kernel ioctl header files for PPC/PPC64
- Removed dl-reloc.c fix, merged upstream</changelog>
<changelog author="kukuk@suse.de" date="1065009600">- Update to glibc cvs from 20031001
- Remove sysmacros.h fix, merged upstream
- Add dl-reloc.c fix for compiler warnings</changelog>
<changelog author="kukuk@suse.de" date="1064836800">- Update kernel-headers to 2.6.0-test6
- Fix sysmacros.h to compile with -ansi</changelog>
<changelog author="kukuk@suse.de" date="1064664000">- Update to glibc CVS from 20030927
- Remove SO_BSDCOMPAT (obsoleted by kernel)
- Make _IOC_TYPECHECK useable for userland programs</changelog>
<changelog author="kukuk@suse.de" date="1064577600">- Remove obsolete patches
- Update to crypt_blowfish 0.4.5</changelog>
<changelog author="kukuk@suse.de" date="1064577600">- Update to glibc CVS from 20030926
- Update to nptl 0.60</changelog>
<changelog author="kukuk@suse.de" date="1064059200">- Update to glibc CVS from 20030920
- Update to nptl 0.59</changelog>
<changelog author="kukuk@suse.de" date="1063800000">- Disable TLS for i586 glibc [Bug #31034]</changelog>
<changelog author="kukuk@suse.de" date="1063713600">- Remove db1.85</changelog>
<changelog author="kukuk@suse.de" date="1063627200">- Update to glibc CVS from 20030915</changelog>
<changelog author="kukuk@suse.de" date="1063627200">- Update to kernel 2.6.0-test5 header files</changelog>
<changelog author="kukuk@suse.de" date="1063454400">- Add librtkaio, a librt using kernel aio</changelog>
<changelog author="kukuk@suse.de" date="1063281600">- Update to current CVS
- Remove patches which are merged in CVS
- Update to nptl-0.58
- Remove _POSIX_VERSION hack</changelog>
<changelog author="kukuk@suse.de" date="1063281600">- version.h: Fix comment how to compile kernel modules</changelog>
<changelog author="aj@suse.de" date="1063195200">- Install en_US.ISO-8859-15 under this name [#30373].</changelog>
<changelog author="aj@suse.de" date="1063108800">- Fix last patch.</changelog>
<changelog author="aj@suse.de" date="1063022400">- Fix setting up of user signal handler in linuxthreads on x86_64.</changelog>
<changelog author="kukuk@suse.de" date="1062763200">- Add dl-tls.c to fix out of memory with static TLS errors</changelog>
<changelog author="kukuk@suse.de" date="1062590400">- Update glibc-linuxthreads
- Set _POSIX_VERSION back to 199209</changelog>
<changelog author="kukuk@suse.de" date="1062417600">- Fix typo in nss_compat patch</changelog>
<changelog author="kukuk@suse.de" date="1062417600">- Add opendir fix for usage with NPTL
- Fix getspnam/getspent in nss_compat [Bug #29689]
- Set _POSIX2_VERSION back to 199209</changelog>
<changelog author="kukuk@suse.de" date="1061985600">- Update to current CVS version</changelog>
<changelog author="kukuk@suse.de" date="1061812800">- Update to current CVS version</changelog>
<changelog author="aj@suse.de" date="1061208000">- increase stack size for linuxthreads/set-context.</changelog>
<changelog author="aj@suse.de" date="1061208000">- Fix mathinline.h for i386 to compile under C++ without warnings.</changelog>
<changelog author="ro@suse.de" date="1061121600">- kernel-headers.dif: don't include device.h from videodev.h</changelog>
<changelog author="kukuk@suse.de" date="1060948800">- Update to current cvs (fixes assert usage in C++ source code)</changelog>
<changelog author="kukuk@suse.de" date="1060862400">- Initialize fp-&gt;_mode for glibc 2.0 compatibility [Bug #28386]
- On i686, include glibc with and without floating stack enabled
- Update to current cvs
- Update to nptl 0.56</changelog>
<changelog author="kukuk@suse.de" date="1059652800">- Reenable new quota.h</changelog>
<changelog author="kukuk@suse.de" date="1059566400">- Update to current cvs
- Update kernel headers to 2.6.0-test2
- Disable sys/quota.h update
- Enable TLS on AMD64 again</changelog>
<changelog author="kukuk@suse.de" date="1059393600">- Update to current cvs
- Disable TLS on AMD64 temporary
- Update sys/quota.h to match new kernel implementation</changelog>
<changelog author="kukuk@suse.de" date="1059134400">- Update to current cvs
- Update kernel headers to 2.6.0-test1
- Update to nptl 0.55
- Change minimal symbol version on PPC64 back to 2.2.5</changelog>
<changelog author="meissner@suse.de" date="1058961600">- Fixed systemcall clobber lists for asm-ppc/unistd.h (by just
  merging over the asm-ppc64 things).</changelog>
<changelog author="aj@suse.de" date="1058961600">- Handle in ldconfig konqueror.so and other similar KDE hacks that fail without
  rpath.
- Fix bugs exposed by unit-at-a-time option.</changelog>
<changelog author="aj@suse.de" date="1058529600">- Fix compilation with unit-at-a-time enabled compiler.
- Enlarge stack for tst-setcontext test.</changelog>
<changelog author="kukuk@suse.de" date="1056974400">- Update to current CVS (includes if_arp.h and nss_compat changes)
- Update to nptl 0.50
- Kernel header fixes for userland inclusion</changelog>
<changelog author="kukuk@suse.de" date="1056542400">- Update to current CVS
- Add target host and CVS checkout to glibc version printout
- Adjust fnmatch fix
- Update kernel headers to 2.5.73</changelog>
<changelog author="kukuk@suse.de" date="1056456000">- Fix typos in syscalls.list on Alpha</changelog>
<changelog author="kukuk@suse.de" date="1056369600">- fix typo in linuxthreads on SPARC
- Update to current CVS
- Update to nptl 0.48</changelog>
<changelog author="kukuk@suse.de" date="1056024000">- Disable nss_compat patch again</changelog>
<changelog author="kukuk@suse.de" date="1055937600">- Fix reading of locale.alias file
- Update to current CVS snapshot
- Update to nptl 0.47
- Some kernel header file fixes for PPC64/IA64
- Update nss_compat patch</changelog>
<changelog author="kukuk@suse.de" date="1055419200">- Update to current CVS snapshot
- Finish patch for printing linker warning</changelog>
<changelog author="kukuk@suse.de" date="1055332800">- Update to nptl 0.45
- Update to current CVS snapshot
- Add patch to print linker warning, if a static binary calls
  functions using NSS</changelog>
<changelog author="kukuk@suse.de" date="1055246400">- Use %find_lang macro and cleanup glibc-locale filelist</changelog>
<changelog author="kukuk@suse.de" date="1054814400">- Complete mathinline.h fixes</changelog>
<changelog author="kukuk@suse.de" date="1054814400">- linux/compiler.h: Define all inline variants to __inline__</changelog>
<changelog author="kukuk@suse.de" date="1054728000">- Update to current glibc CVS snapshot
- Update to nptl 0.43
- More kernel header fixes
- Make --no-archive default for localedef</changelog>
<changelog author="kukuk@suse.de" date="1054036800">- Update to current glibc CVS snapshot
- Update to nptl 0.40
- Disable nss_compat patch
- Update to kernel headers from 2.5.70</changelog>
<changelog author="kukuk@suse.de" date="1053691200">- Update to current glibc CVS snapshot
- Add patches to make nss_compat work with every service</changelog>
<changelog author="kukuk@suse.de" date="1053345600">- Update to current glibc CVS snapshot
- Add patch for better binary compatibility (errno, h_errno)</changelog>
<changelog author="kukuk@suse.de" date="1053086400">- Update to current glibc CVS snapshot
- Update to nptl 0.39
- Add URL tag
- asm-i386/byteorder.h: fix asm vs. __asm__</changelog>
<changelog author="schwab@suse.de" date="1052913600">- Fix missing syscall numbers on ia64.</changelog>
<changelog author="kukuk@suse.de" date="1052913600">- More kernel headers fixes for i386, ia64, ppc and s390</changelog>
<changelog author="kukuk@suse.de" date="1052740800">- Update to current glibc CVS snapshot
- Fix lot of more kernel headers
- Adjust netinet/igmp.h patch
- Copy linux/version.h in place before compiling glibc</changelog>
<changelog author="kukuk@suse.de" date="1052481600">- Fix bits/stdio.h
- Fix lot of kernel headers to work in userspace
- Fix netinet/igmp.h
- Enable TLS on PPC</changelog>
<changelog author="kukuk@suse.de" date="1052308800">- Update CVS snapshot
- Enable TLS on IA64
- Update to nptl 0.37
- Update kernel-headers to 2.5.69</changelog>
<changelog author="ro@suse.de" date="1051185600">- fix install_info --delete call and move from preun to postun</changelog>
<changelog author="aj@suse.de" date="1050062400">- Do not build locales in parallel.</changelog>
<changelog author="kukuk@suse.de" date="1049803200">- Disable TLS for PPC</changelog>
<changelog author="kukuk@suse.de" date="1049716800">- Update CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1049544000">- Disable TLS for ia64
- Update to nptl 0.34
- Update to CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1049457600">- Remove libNoVersion from filelist on alpha
- Add nptl docu</changelog>
<changelog author="kukuk@suse.de" date="1049457600">- Update to nptl 0.33
- Run ldconfig after installation
- Update to CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1048939200">- Update to CVS snapshot
- Add USAGI patches for kernel-headers
- Add nptl on i686
- Enable --with-tls
- Implement NI_NUMSERICSCOPE for getnameinfo
- Implement AI_V4MAPPED/AI_ALL for getaddrinfo
- Implement AI_ADDRCONFIG for getaddrinfo
- Add USAGI patch for kernel headers</changelog>
<changelog author="schwab@suse.de" date="1048507200">- Sanitize &lt;asm-ia64/pal.h&gt;.</changelog>
<changelog author="aj@suse.de" date="1047902400">- Fix tst-aio7 testcase and enable it again.
- Enable %fs for x86-64.
- Install en_US.ISO-8859-15 for libstdc++.
- Fix bits/syscalls.h for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1047556800">- Revert tcgetattr change [Bug #25173/#25174]</changelog>
<changelog author="aj@suse.de" date="1046779200">- Fix &lt;tgmath.h&gt; lround/lrint functions.</changelog>
<changelog author="aj@suse.de" date="1046520000">- Update to 2.3.2 release.</changelog>
<changelog author="kukuk@suse.de" date="1046260800">- Update to current cvs snapshot (fixes OOo and mysql problems)</changelog>
<changelog author="kukuk@suse.de" date="1046088000">- Disable aio7 test on s390(x), too.</changelog>
<changelog author="kukuk@suse.de" date="1046088000">- Update to current cvs snapshot (post 2.3.2-pre1)
- Remove glibc-2.3-ppc32-textrel.patch, is included in CVS
- Remove libc23-ppc64-cvshead20021210.patch</changelog>
<changelog author="kukuk@suse.de" date="1045742400">- Update to current cvs snapshot
- Remove glibc-2.3-ppc64-vfork-20030214.patch, seems to be
  included already.</changelog>
<changelog author="olh@suse.de" date="1045656000">- add glibc-2.3-ppc32-textrel.patch
    glibc-2.3-ppc64-vfork-20030214.patch</changelog>
<changelog author="kukuk@suse.de" date="1045224000">- Extend getent to print all IP addresses of one host</changelog>
<changelog author="kukuk@suse.de" date="1045137600">- Update to current snapshot</changelog>
<changelog author="kukuk@suse.de" date="1045051200">- Update to current snapshot (contains official fix for #23513)</changelog>
<changelog author="kukuk@suse.de" date="1044964800">- Update to current snapshot
- Fix corruption of internal data in gethostbyname2 [Bug #23513]</changelog>
<changelog author="aj@suse.de" date="1044792000">- Fix cancellation of system calls on x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1044705600">- Fix wrong logic in dynamic resolv.conf patch</changelog>
<changelog author="kukuk@suse.de" date="1044619200">- Fix access of _res symbol in multithreaded programs
- Add &quot;dynamic resolv.conf&quot; patch to libnss_dns, too.
- Remove obsolete db2 manual pages
- Update to current snapshot (fixes [Bug #23363])</changelog>
<changelog author="kukuk@suse.de" date="1044532800">- Update to current snapshot
- Use install-info for info pages</changelog>
<changelog author="schwab@suse.de" date="1044360000">- Fix regexp parsing.</changelog>
<changelog author="meissner@suse.de" date="1044273600">- Merged a unistd.h gcc3.3 compliance patch from Franz Sirl for
  ppc and ppc64 kernel headers.</changelog>
<changelog author="schwab@suse.de" date="1044014400">- Fix building on s390[x].</changelog>
<changelog author="kukuk@suse.de" date="1044014400">- Update to current glibc cvs</changelog>
<changelog author="aj@suse.de" date="1043928000">- Fix one build problem on sparc.
- Fix asm-x86_64/mtrr.h.</changelog>
<changelog author="kukuk@suse.de" date="1043841600">- Update to current glibc cvs
- Fix libm-ulps for x86-64 and ia64</changelog>
<changelog author="schwab@suse.de" date="1043323200">- Fix use of DT_FINI_ARRAY.
- Temporarily disable tst-aio7 test on ia64.</changelog>
<changelog author="schwab@suse.de" date="1042545600">- Fix ia64 for non-tls build.</changelog>
<changelog author="aj@suse.de" date="1042545600">- Package libpthread_nonshared.a.</changelog>
<changelog author="kukuk@suse.de" date="1042459200">- Add fixed version of x86-64-linuxthreads-disable-fs.diff
- Readd parts of libm-x86-64.diff
- Update to current cvs snapshot
- Add fix for errno compatibility
- Add s390(x) vfork fixes</changelog>
<changelog author="kukuk@suse.de" date="1042372800">- Update to current cvs snapshot</changelog>
<changelog author="bg@suse.de" date="1041595200">- removed obsolete patch for hppa</changelog>
<changelog author="kukuk@suse.de" date="1040385600">- Update to current cvs snapshot
- Obsoletes glibc-2.3-setjmp-ppc64.diff
- Obsoletes build-alpha.diff
- Obsoletes libm-x86-64.diff
- Disable activate-spinlocks.diff temporary
- Disable x86-64-linuxthreads-disable-fs.diff (breaks compilation)</changelog>
<changelog author="olh@suse.de" date="1040126400">- remove glibc-2.2.5-ppc64-bits-socket_h.diff
  add glibc-2.3-setjmp-ppc64.diff
  add libc23-ppc64-cvshead20021210.patch
  dont run configure in subshell, it can fail and rpm cant catch it</changelog>
<changelog author="schwab@suse.de" date="1039780800">- Add more ia64 syscalls.</changelog>
<changelog author="olh@suse.de" date="1039176000">- build also the locals parallel
  do not fail with parallel calculation on lowmem systems</changelog>
<changelog author="aj@suse.de" date="1038916800">- Build parallel on x86-64.
- Activate fast spinlocks in malloc for x86 and x86-64.
- Integrate new math library from AMD for x86-64.</changelog>
<changelog author="bg@suse.de" date="1038571200">- Fix build on hppa.</changelog>
<changelog author="aj@suse.de" date="1038484800">- Fix build on alpha.</changelog>
<changelog author="aj@suse.de" date="1038484800">- Update to CVS version from 2002-11-28.
- Do not use %fs for threads for now on x86-64.
- Fix fnmatch bug with multibyte strings.</changelog>
<changelog author="bg@suse.de" date="1037102400">- Updated hppa patches</changelog>
<changelog author="kukuk@suse.de" date="1036670400">- getaddrinfo(): get host information for AF_INET and AF_INET6 only
  from the same service [Bug #21237]</changelog>
<changelog author="bg@suse.de" date="1036670400">- Fix build of linuxthreads for hppa</changelog>
<changelog author="bg@suse.de" date="1036497600">- Use current kernel-headers for parisc
- Add support for hppa</changelog>
<changelog author="kukuk@suse.de" date="1036497600">- Update to current CVS snapshot</changelog>
<changelog author="schwab@suse.de" date="1035288000">- Fix ia64 syscall numbers.</changelog>
<changelog author="schwab@suse.de" date="1035201600">- Fix alignment in locale-archive.</changelog>
<changelog author="kukuk@suse.de" date="1035201600">- Update to glibc 2.3.1 cvs 20021021
- Remove nss_dns6 patch</changelog>
<changelog author="kukuk@suse.de" date="1034683200">- Update to glibc 2.3.1 cvs 20021015</changelog>
<changelog author="kukuk@suse.de" date="1033560000">- Update to glibc 2.3 cvs 20021002
- Update crypt_blowfish to 0.4.4 (manual page fix, hppa fix)</changelog>
<changelog author="mls@suse.de" date="1032955200">- build with -finline-limit=2000 on mips/armv4l</changelog>
<changelog author="schwab@suse.de" date="1032264000">- Add new ia64 syscall numbers.</changelog>
<changelog author="meissner@suse.de" date="1032177600">- Added AIO syscall numbers for ppc/ppc64, so libaio does not need them.
- Aligned powerpc bits/sem.h to be the same as the other 64bit
  archs, keeping the 32bit layout.
- Added the faster ppc32 memset.S from glibc HEAD on request of IBM.</changelog>
<changelog author="meissner@suse.de" date="1031832000">- ppc/ppc64: added more biarch things to the SystemV IPC headers
  which are needed to get 64bit ipc / IPC_STAT to work.</changelog>
<changelog author="bk@suse.de" date="1031572800">- s390x-biarch: use correct wordsize.h(move to main 32/64 directory)
- s390x: requires 64-bit kernel</changelog>
<changelog author="kukuk@suse.de" date="1031572800">- Increase minimum value of MAXPACKET in libnss_dns, too</changelog>
<changelog author="uli@suse.de" date="1031572800">- all architectures are created equal, but some are more equal
  than others; increased DB_FILE_ID_LEN in DB2 to 24 on x86-64,
  ia64, s390x and ppc64 to fit 64 bit __ino_t type</changelog>
<changelog author="mls@suse.de" date="1031313600">- fix squeeze bug in db-1.85: set dirty flag after page modification</changelog>
<changelog author="kukuk@suse.de" date="1031313600">- Increase minimum value of MAXPACKET</changelog>
<changelog author="kukuk@suse.de" date="1030968000">- Fix asm header files for sparc/sparc64</changelog>
<changelog author="aj@suse.de" date="1030708800">- Revert linuxthreads for x86-64 for now.</changelog>
<changelog author="aj@suse.de" date="1030536000">- Add optimized math routines for x86-64.</changelog>
<changelog author="olh@suse.de" date="1030449600">- BuildFlags=&quot;$(echo $RPM_OPT_FLAGS | sed 's#-mminimal-toc##')&quot;</changelog>
<changelog author="olh@suse.de" date="1030363200">- add ppc64_glibc_2.2.5_sunrpc-fix.patch
  * sysdeps/unix/sysv/linux/powerpc/bits/socket.h: New file that adds
  __powerpc64__ specific fields and adjust size/alignment for 64-bit.</changelog>
<changelog author="aj@suse.de" date="1030104000">- Use floating stacks for x86-64.
- Add LICENSE file.
- Fix profiling code on x86-64.
- Add strcspn, strpbrk and strspn optimizations for x86-64.
- Fix makecontext for x86-64.</changelog>
<changelog author="aj@suse.de" date="1029412800">- Use biarch headers already for building so that bits/syscalls.h is
  build correctly.
- Fix bits/syscalls.h for x86-64.
- Remove *xattr patches.</changelog>
<changelog author="kukuk@suse.de" date="1028808000">- Update to current cvs (calloc variable overflow fixed)
- Apply fix for calloc fix
- Add *xattr system calls and error number</changelog>
<changelog author="kukuk@suse.de" date="1028635200">- Update to current cvs (IPv6 fixes)</changelog>
<changelog author="aj@suse.de" date="1028548800">- Implement *context functions for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1028376000">- Update kernel-headers to version 2.4.19
- Add PreRequires &quot;filesystem&quot;.</changelog>
<changelog author="bk@suse.de" date="1028203200">- added s390-may2002.diff with some chunks from may2002 drop
- give make check a second chance on s390(x), but fail if not(race)</changelog>
<changelog author="kukuk@suse.de" date="1028030400">- sunrpc/xdr_array.c: Check for variable overflow
- Ignore failed make check on s390(x)</changelog>
<changelog author="aj@suse.de" date="1028030400">- Add optimisations for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1027944000">- Don't allocate/free category name in setlocale() unnecessarily
  (for IBM Java [Bug #17065]).</changelog>
<changelog author="kukuk@suse.de" date="1027425600">- Update to current glibc cvs (pread/pwrite fixes)
- Remove extra de.po, is in official tarball now.</changelog>
<changelog author="aj@suse.de" date="1027166400">- Fix profiling for x86-64.</changelog>
<changelog author="meissner@suse.de" date="1027080000">- Fixed the PPC64 patch, several superflous files removed.
- Reenabled make check for ppc64.</changelog>
<changelog author="kukuk@suse.de" date="1026907200">- Update to current glibc cvs
- Fix kernel headers for s390/s390x
- Move some binaries/shell scripts and manual pages to the
  correct subpackage</changelog>
<changelog author="meissner@suse.de" date="1026820800">- Merged latest PowerPC patch from IBM.
  * Lots of ppc64 related fixes.
  * Start of biarch support.
  * Changed struct stat in 64bit ABI.</changelog>
<changelog author="aj@suse.de" date="1026475200">- Add biarch patch for s390 and s390x.</changelog>
<changelog author="aj@suse.de" date="1026129600">- Add some optimized x86-64 math routines and a fixed lgammal
  implementation.
- Testsuite on x86-64 should pass now.
- Run ldconfig in postinstall.
- Fix memleak in catgets.</changelog>
<changelog author="kukuk@suse.de" date="1025956800">- Fix typo in create_biarch_asm.sh (asm-sparc path)</changelog>
<changelog author="kukuk@suse.de" date="1025784000">- Fix typo in manpages/Makefile
- Fix filelist (on some archs ld-linux.so.2 was missing)</changelog>
<changelog author="kukuk@suse.de" date="1025784000">- Revert mktime patch (check for year &lt; 70)
- Replace ifarch i386 with ix86
- Add patch for arm
- Include pt_chown again</changelog>
<changelog author="kukuk@suse.de" date="1025697600">- Add more new manual pages
- Fix spec file (renaming of ld-*, creating of include/asm header
  files)
- Update to current CVS version
- Fix kernel-headers for x86-64 (don't overwrite patched version)
- Rename Equador -&gt; Ecuador [Bug #16648]
- Add hint about security problem of host caching with nscd to
  config file.</changelog>
<changelog author="aj@suse.de" date="1025006400">- Fix dl-machine.h for x86-64 to compile with new binutils.
- Fix mtrr.h header for x86-64.
- Do not package pt_chown.</changelog>
<changelog author="sf@suse.de" date="1024401600">- reverted changes from Tue Jun 11 10:04:55 CEST 2002
  (took the kernel-headers from before, readded patch9)
- add new archive with kernel-headers for x86_64
- add autofs patch</changelog>
<changelog author="bk@suse.de" date="1024315200">- remove s390* from the list of archs that ignore check fail</changelog>
<changelog author="uli@suse.de" date="1023969600">- fixed typos in spec</changelog>
<changelog author="schwab@suse.de" date="1023969600">- Fix ssize_t and __ipc_pid_t for ppc64.</changelog>
<changelog author="uli@suse.de" date="1023883200">- fix errlist.c for ARM as well</changelog>
<changelog author="sf@suse.de" date="1023796800">- made new kernel-header archive from kernel-source
- added asm-ppc64 to kernel-headers
- removed patch9 as it is obsoleted by the new kernel-headers</changelog>
<changelog author="olh@suse.de" date="1023451200">- update asm-ppc64/ioctls.h, missing TIOCGDEV</changelog>
<changelog author="olh@suse.de" date="1023364800">- fix glibc-ppc64 patch</changelog>
<changelog author="olh@suse.de" date="1023364800">- update ppc64_glibc_ldconfig.diff</changelog>
<changelog author="ke@suse.de" date="1023364800">- Update de.po from
  http://www.iro.umontreal.ca/contrib/po/teams/PO/de/libc-2.2.5.de.po.
- Use only translated entries to make the testsuite happy; call
  msgattrib on de.po and hu.po [# 16438].</changelog>
<changelog author="aj@suse.de" date="1023105600">- Clean up generation of asm includes for bi-arch systems.
- Enable profiling for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1023105600">- Add fix for weak declaration &quot;_old_sys_nerr&quot;
- Remove already disabled alpha patch
- Update to current CVS</changelog>
<changelog author="olh@suse.de" date="1022932800">- fix stat for real, wrong size for st_nlink</changelog>
<changelog author="olh@suse.de" date="1022673600">- add ppc64_glibc_2.2.5-types.diff, fixes stat()</changelog>
<changelog author="olh@suse.de" date="1022673600">- add ppc64_glibc_ldconfig.diff for elf32/elf64 coexistance</changelog>
<changelog author="aj@suse.de" date="1022155200">- Rename __thread to fix problems with GCC 3.2.</changelog>
<changelog author="olh@suse.de" date="1021896000">- add ppc64 kernel headers
  add create_ppc_asm.sh
  update ppc64 patch, use /lib64/ld64.so.1
  move generic syscalls.list to ppc64/32
  set/getrlimit GLIBC2.0 is ppc32 only
  use parallel make on ppc and ppc64
  do not chroot as user
  cleanup nested ifarch for dynamic linker</changelog>
<changelog author="aj@suse.de" date="1021464000">- Fix building of linuxthreads with current GCC.</changelog>
<changelog author="olh@suse.de" date="1021291200">- fix ppc64 RTLDLIST ld64.so rewrite</changelog>
<changelog author="schwab@suse.de" date="1021118400">- Add div/mod compatibility functions for ia64.</changelog>
<changelog author="olh@suse.de" date="1021032000">- add ppc64 support</changelog>
<changelog author="aj@suse.de" date="1020945600">- Add sys/io.h for x86-64.</changelog>
<changelog author="ihno@suse.de" date="1020686400">- corrected memory calculation for parallel build</changelog>
<changelog author="kukuk@suse.de" date="1020427200">- Add fix to compile math.h on SPARC with g++</changelog>
<changelog author="kukuk@suse.de" date="1020340800">- Update to current CVS 2.2 branch
- Add x86-64 fix for crti.o and /usr/lib64 with libpthread</changelog>
<changelog author="kukuk@suse.de" date="1019822400">- define sqrtl alias for PowerPC</changelog>
<changelog author="aj@suse.de" date="1019476800">- Fix vfork for x86-64.
- Fix handling of ld.so.cache for x86-64.</changelog>
<changelog author="aj@suse.de" date="1019131200">- Allow testsuite to fail for x86-64.
- Add ULPs for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1019044800">- Update to current snapshot (mktime and dl fixes)
- Update hu.po
- Do not build a profiled glibc for x86-64</changelog>
<changelog author="kukuk@suse.de" date="1018612800">- Update to current snapshot (fix SPARC compile)
- Revert do-lookup.h patch on Alpha (does not work here)</changelog>
<changelog author="aj@suse.de" date="1018440000">- Fix linuxthreads for x86-64.</changelog>
<changelog author="aj@suse.de" date="1018440000">- Add x86-64.diff to fix glob64.</changelog>
<changelog author="kukuk@suse.de" date="1018440000">- Update kernel-headers to 2.4.19pre4 (with x86-64 support)
- Update glibc to current cvs snapshot
- Allow old currencies (before EUR)</changelog>
<changelog author="aj@suse.de" date="1017748800">- Update ULPs.</changelog>
<changelog author="kukuk@suse.de" date="1016712000">- Create html pages after installation of info pages [Bug #15283]</changelog>
<changelog author="kukuk@suse.de" date="1015934400">- Add db1 fix if blocksize is not ^2</changelog>
<changelog author="kukuk@suse.de" date="1015070400">- Add fix for format string bug</changelog>
<changelog author="kukuk@suse.de" date="1015070400">- Fix return value of nice wrapper</changelog>
<changelog author="kukuk@suse.de" date="1014984000">- Add fix for corrupt ut_line
- Add fix for current gcc 3.1
- Add patch for nice return values</changelog>
<changelog author="kukuk@suse.de" date="1014897600">- Add fix for rtime, swscanf and ia64</changelog>
<changelog author="kukuk@suse.de" date="1014033600">- When a dlopened module references a weak symbol from another
  dlopened module (loaded with RTLD_GLOBAL) no dependency was
  generated for this fact, so the second module was unloaded even
  if the first one was still around.</changelog>
<changelog author="kukuk@suse.de" date="1013947200">- Add pthread/signal bugfix [Bug #13280]
- Fix directory file list (don't include /usr/include)</changelog>
<changelog author="kukuk@suse.de" date="1013688000">- Use defattr in spec file to avoid problems with not existing
  UIDs and rpm.</changelog>
<changelog author="aj@suse.de" date="1013688000">- Update ULPs for GCC 3.1.</changelog>
<changelog author="kukuk@suse.de" date="1013601600">- Apply db1 patch from mls@suse.de to fix rpm problems</changelog>
<changelog author="ro@suse.de" date="1013515200">- fix owner/group for kernel headers</changelog>
<changelog author="kukuk@suse.de" date="1013428800">- Add another solution for the glob problem</changelog>
<changelog author="kukuk@suse.de" date="1013083200">- Add fix for glob (glob should not call globfree)
- Add fix for innetgr</changelog>
<changelog author="kukuk@suse.de" date="1012996800">- Use correct BuildRoot</changelog>
<changelog author="kukuk@suse.de" date="1012996800">- Update hu.po</changelog>
<changelog author="kukuk@suse.de" date="1012996800">- Set LC_CTYPE for error messages in localedef [Bug #12878]</changelog>
<changelog author="kukuk@suse.de" date="1012824000">- Add fixes from CVS: dynamic loader, readv and writev seg.fault
  and various architecture fixes for alpha and mips
- Don't compile with -g on Alpha
- Add fix for possible endless loop fix</changelog>
<changelog author="bk@suse.de" date="1012564800">- merged s390x lib64 patch and spec file changes</changelog>
<changelog author="kukuk@suse.de" date="1011787200">- Split glibc into glibc and glibc-locale
- Create more UTF8 locale</changelog>
<changelog author="kukuk@suse.de" date="1011614400">- Update to official glibc 2.2.5</changelog>
<changelog author="kukuk@suse.de" date="1011182400">- Remove /var/adm/setup/setup.timeconfig</changelog>
<changelog author="kukuk@suse.de" date="1011182400">- Apply S390 fix</changelog>
<changelog author="kukuk@suse.de" date="1010577600">- Update to glibc 2.2.5pre1</changelog>
<changelog author="egmont@suselinux.hu" date="1010491200">- Added partial Hungarian translation</changelog>
<changelog author="kukuk@suse.de" date="1010491200">- Add patch to pass math tests with gcc 3.x
- Update to current CVS version</changelog>
<changelog author="kukuk@suse.de" date="1010059200">- Update kernel header files to 2.4.17</changelog>
<changelog author="kukuk@suse.de" date="1009886400">- Update current CVS version, add final fixes for LSB test suite</changelog>
<changelog author="poeml@suse.de" date="1008676800">- Install ja_JP.SJIS locale.</changelog>
<changelog author="schwab@suse.de" date="1008417600">- Fix missing declaration of md5_uintptr.</changelog>
<changelog author="kukuk@suse.de" date="1008331200">- Update to correct CVS branch</changelog>
<changelog author="kukuk@suse.de" date="1008244800">- Update to current CVS
- Increase PATH_MAX to 4096 (including the leading zero)
- Clear pointer if asprintf fails
- pthread_key_delete should not contact thread manager before it
  is created.</changelog>
<changelog author="kukuk@suse.de" date="1008072000">- Fix prelink patch</changelog>
<changelog author="kukuk@suse.de" date="1008072000">- Add fixes for LSB.os test suite (ftw, grantpt and ftok)
- Update to current CVS
- Add prelink patch</changelog>
<changelog author="kukuk@suse.de" date="1007726400">- Merge with current CVS
- Add blowfish crypt</changelog>
<changelog author="uli@suse.de" date="1006516800">- added armv4l arch to spec
- added arm kernel headers
- added trivial fix for dl-machine.h from CVS (see arm.dif)</changelog>
<changelog author="adrian@suse.de" date="1005825600">- add mips architecture to spec file
- apply further mips fixes for ld
- activate %clean again</changelog>
<changelog author="kukuk@suse.de" date="1005480000">- Fix lost permissions of shell script on SPARC</changelog>
<changelog author="kukuk@suse.de" date="1005220800">- Add 32bit UID fixes</changelog>
<changelog author="kukuk@suse.de" date="1005220800">- More fixes for asm-ia64 header files</changelog>
<changelog author="kukuk@suse.de" date="1005220800">- Fix asm-i386/processor.h (don't align struct)
- Fix asm-ia64/bitops.h (define CMPXCHG_BUGCHECK)
- Correct version number in version.h</changelog>
<changelog author="uli@suse.de" date="1005134400">- fixed sys/io.h, sysmacros.h for icc</changelog>
<changelog author="kukuk@suse.de" date="1005048000">- Update kernel-headers to 2.4.14</changelog>
<changelog author="kukuk@suse.de" date="1004616000">- Use again old rules to generate html files</changelog>
<changelog author="schwab@suse.de" date="1003665600">- Fix inttypes.h for C++.</changelog>
<changelog author="aj@suse.de" date="1003492800">- Fix typo in inttypes.h that presents compilation by non-GCC compilers.</changelog>
<changelog author="aj@suse.de" date="1003233600">- Update elf.h to include x86-64 defines since those are needed
  by some other tools.</changelog>
<changelog author="schwab@suse.de" date="1001678400">- Readd patch from 2001-09-10 with corrections.
- Add compatibility patch for GCC 3.  This allows to build glibc
  with GCC 3.
- Require that make check succeeds on ia64.</changelog>
<changelog author="aj@suse.de" date="1000382400">- Add a better version of the threads-fork patch that fixes some
  more places where interrupts can occur and does this a bit cleaner.</changelog>
<changelog author="aj@suse.de" date="1000209600">- Remove patch from 2001-09-10 since it breaks the dynamic linker.</changelog>
<changelog author="aj@suse.de" date="1000209600">- Fix bug in linuxthreads where manager and threads could
  get out of synch due to an interrupted read call.</changelog>
<changelog author="schwab@suse.de" date="1000123200">- Fix handling of dependent dynamic objects for dlopen/dlclose.</changelog>
<changelog author="kukuk@suse.de" date="999950400">- Don't create gconv cache (else iconv --list seg.faults)</changelog>
<changelog author="aj@suse.de" date="999000000">- Improve dynamic linker to relocate dynamic objects faster.  This
  implies a small cache for symbol lookups and handling the ld -z combreloc
  feature if binaries are linked this way.</changelog>
<changelog author="kukuk@suse.de" date="998654400">- Add fix for handling of %l[] in vfscanf
- ldconfig removes stale links now
- Remove susehelp config files, now in susehelp itself</changelog>
<changelog author="aj@suse.de" date="998481600">- Update s390 patch from IBM.</changelog>
<changelog author="kukuk@suse.de" date="998049600">- Adjust dns6 patch for 2.2.4
- Fix spec file (include lost libnss_dns6.so)
- Fix versionnumber in version.h [Bug #9759]
- Update kernel-header to 2.4.9</changelog>
<changelog author="aj@suse.de" date="997963200">- Update to 2.2.4 final.  Add s390-ucontext patch.</changelog>
<changelog author="aj@suse.de" date="997444800">- Update to current glibc version.  Do not use the hardlink program
  for compatification since localedef will do this itself now.
  Create gconv cache.</changelog>
<changelog author="aj@suse.de" date="996667200">- Add patch for zic to create copy of the timezone instead
  of a symbolic link so that the file exists even if /usr is not
  mounted.
  Use i486 instead of i386 as default architecture for i386.</changelog>
<changelog author="kukuk@suse.de" date="996321600">- Fix problem with linux/spinlock.h</changelog>
<changelog author="kukuk@suse.de" date="996235200">- Update kernel-header files to 2.4.7</changelog>
<changelog author="froh@suse.de" date="996148800">- add fix for failing tst-setcontext on s390</changelog>
<changelog author="aj@suse.de" date="996062400">- Add patch to fix loading of dynamic libs in static programs for PPC.</changelog>
<changelog author="kukuk@suse.de" date="995630400">- Update to current CVS snapshot
- Disable tst-regex and test-lfs</changelog>
<changelog author="kukuk@suse.de" date="994420800">- Add da_DK@euro and da_DK.UTF-8</changelog>
<changelog author="kukuk@suse.de" date="994334400">- Update to current CVS snapshot
- Remove obsolete cvs patch
- Fix DNS/IPv6 patch
- Hardlink equal locale files</changelog>
<changelog author="olh@suse.de" date="993211200">- add glibc-2.2.3-ppc_dlmachine.diff to fix binutils make check</changelog>
<changelog author="aj@suse.de" date="992952000">- Fix profiling on PowerPC.</changelog>
<changelog author="bk@suse.de" date="992952000">- added s390x support to spec file</changelog>
<changelog author="schwab@suse.de" date="992606400">- Fixup asm-ia64/atomic.h for user-space inclusion.</changelog>
<changelog author="aj@suse.de" date="992347200">- Fix testsuite for sparc.</changelog>
<changelog author="aj@suse.de" date="992260800">- Fix testsuite for powerpc and S390, build again on alpha.</changelog>
<changelog author="kukuk@suse.de" date="990532800">- Update to current CVS snapshot
- Rmove support for PF_LOCAL from getaddrinfo [Bug #8469]</changelog>
<changelog author="kukuk@suse.de" date="989755200">- Don't use absolute paths in pre-install-section</changelog>
<changelog author="kukuk@suse.de" date="988977600">- Add special version.h which fails on compiling kernel modules</changelog>
<changelog author="kukuk@suse.de" date="988459200">- Update to glibc 2.2.3, kernel-headers-2.4.4</changelog>
<changelog author="schwab@suse.de" date="988113600">- Fix feenableexcept on ia64.</changelog>
<changelog author="aj@suse.de" date="988113600">- Install some more UTF-8 locales, fix tr_TR locale.</changelog>
<changelog author="kukuk@suse.de" date="987076800">- Include our own texi2html</changelog>
<changelog author="kukuk@suse.de" date="986990400">- Add fixes from SuSE kernel header files
- Add patch to reload /etc/resolv.conf if there was changes
- Add glibc.conf for susehelp (glibc-html pages)</changelog>
<changelog author="schwab@suse.de" date="986817600">- Fix ld.so for kernel 2.4.3 on ia64.</changelog>
<changelog author="kukuk@suse.de" date="986472000">- Add more fixes from CVS</changelog>
<changelog author="kukuk@suse.de" date="986299200">- Fix isdn header files from kernel-headers</changelog>
<changelog author="kukuk@suse.de" date="985953600">- Update kernel header files to 2.4.3</changelog>
<changelog author="kukuk@suse.de" date="985953600">- Merge s390 patches
- Fix rcmd_af() (allow PF_UNSPEC)</changelog>
<changelog author="aj@suse.de" date="985953600">- Add some small fixes, fix spec file for removal of man-pages.</changelog>
<changelog author="kukuk@suse.de" date="985867200">- Don't provide kernel_headers any longer
- Remove some man-pages which are now official in the man-pages
  package</changelog>
<changelog author="aj@suse.de" date="985867200">- Fix shmfs recognition.</changelog>
<changelog author="ro@suse.de" date="985867200">- added db-splitmask fix from mls (hopefully work around bug in db1)</changelog>
<changelog author="aj@suse.de" date="985780800">- Fix s390 to not generate wrong relocations, work around compiler
  error.</changelog>
<changelog author="kukuk@suse.de" date="985176000">- glibc-devel obsoletes and provides linclude</changelog>
<changelog author="kukuk@suse.de" date="985089600">- Add strtok and other fixes from CVS
- Add yp_all fix</changelog>
<changelog author="kukuk@suse.de" date="984484800">- Add more s390 string.h fixes</changelog>
<changelog author="aj@suse.de" date="984398400">- Add fixes for s390, don't run testsuite on s390 for now.</changelog>
<changelog author="kukuk@suse.de" date="984139200">- Fix linux/init.h header file</changelog>
<changelog author="aj@suse.de" date="984139200">- Handle new EM_S390 value.</changelog>
<changelog author="kukuk@suse.de" date="984139200">- kernel-heaer fixes to build on Alpha</changelog>
<changelog author="ro@suse.de" date="984052800">- update kernel-headers to 2.4.2</changelog>
<changelog author="ro@suse.de" date="984052800">- kernel-header fixes to build on s390</changelog>
<changelog author="schwab@suse.de" date="982843200">- More kernel header fixes for IA64.</changelog>
<changelog author="kukuk@suse.de" date="982670400">- Remove optimisation not supported on all plattforms</changelog>
<changelog author="kukuk@suse.de" date="982584000">- Fix Optimization of glibc build
- Add Optimization for alphaev6 and sparcv9</changelog>
<changelog author="kukuk@suse.de" date="982411200">- Update to glibc 2.2.2 from CVS</changelog>
<changelog author="kukuk@suse.de" date="982238400">- kernel header fixes for SPARC and IA64</changelog>
<changelog author="kukuk@suse.de" date="982065600">- Make optimization for i686 work
- Add manual page for ldd</changelog>
<changelog author="kukuk@suse.de" date="981979200">- Fix more kernel headers</changelog>
<changelog author="kukuk@suse.de" date="981633600">- Fix more kernel-headers</changelog>
<changelog author="kukuk@suse.de" date="981547200">- Delete links in pre install section for glibc-devel</changelog>
<changelog author="kukuk@suse.de" date="981547200">- Fix kernel-header includes</changelog>
<changelog author="kukuk@suse.de" date="981460800">- Fix creating of /usr/include/asm on SPARC
- Add more CVS patches</changelog>
<changelog author="kukuk@suse.de" date="981374400">- Add some patches from CVS
- Include our own kernel header files</changelog>
<changelog author="aj@suse.de" date="980164800">- Add elf patch to fix problems on ia64 and ppc with _dl_pagesize.</changelog>
<changelog author="aj@suse.de" date="980164800">- Fix mmap64 on powerpc.</changelog>
<changelog author="aj@suse.de" date="979646400">- Fix sunrpc-udp.diff, add mman.h fix for powerpc.</changelog>
<changelog author="aj@suse.de" date="979128000">- Add sunrpc-udp.diff to fix UDP timeouts with Linux 2.4 kernel.</changelog>
<changelog author="aj@suse.de" date="979041600">- Add glibc-2.2.secure.diff to close some security holes.</changelog>
<changelog author="schwab@suse.de" date="978523200">- Fix strtol and friends on 64 bit platforms.
- Use 8192 as default pagesize on ia64.
- Scan AUX vector also in statically linked programs.</changelog>
<changelog author="aj@suse.de" date="978523200">- Build some UTF-8 locales using a patch from Markus Kuhn.</changelog>
<changelog author="aj@suse.de" date="976708800">- Add compatibility patch for IPv6 and Linux 2.2.</changelog>
<changelog author="schwab@suse.de" date="976708800">- Update ia64 patch.</changelog>
<changelog author="kukuk@suse.de" date="976363200">- Fix resolver bug</changelog>
<changelog author="kukuk@suse.de" date="975672000">- Add bug fixes for setlocale and strncat
- strip gconv modules</changelog>
<changelog author="kukuk@suse.de" date="975067200">- Fix typo in spec file</changelog>
<changelog author="kukuk@suse.de" date="974980800">- Add hack for POWER3</changelog>
<changelog author="kukuk@suse.de" date="974894400">- Add strncat bugfix for S/390</changelog>
<changelog author="kukuk@suse.de" date="974808000">- Don't bulid 32bit compat packages</changelog>
<changelog author="schwab@suse.de" date="974721600">- Remove use of getpagesize syscall on ia64.
- Follow DT_INIT/DT_FINI change in compiler.</changelog>
<changelog author="kukuk@suse.de" date="974635200">- Minor specfile fixes</changelog>
<changelog author="kukuk@suse.de" date="974376000">- Add lot of more bug fixes</changelog>
<changelog author="kukuk@suse.de" date="974203200">- Add bugfix for static linked binaries/ld.so.cache from aj@suse.de</changelog>
<changelog author="aj@suse.de" date="974116800">- Fix noversion.diff and spec file.</changelog>
<changelog author="kukuk@suse.de" date="973944000">- Fix nssv1 on PowerPC
- no libNoVersion on SPARC</changelog>
<changelog author="kukuk@suse.de" date="973857600">- Disable make check on PowerPC and Alpha</changelog>
<changelog author="kukuk@suse.de" date="973857600">- Update to final glibc 2.2</changelog>
<changelog author="kukuk@suse.de" date="973252800">- Update to glibc-2.2-20001103 (glibc-2.1.97)
- Don't install libNoVersion on PowerPC
- Rename nssv1 -&gt; glibc-nssv1
- Rename libd -&gt; glibc-profile, move libg.a to libc
- Rename libcinfo -&gt; glibc-info
- Rename libchtml -&gt; glibc-html
- Rename localedb -&gt; glibc-i18ndata
- Rename libc -&gt; glibc-devel
- Rename shlibs -&gt; glibc</changelog>
<changelog author="kukuk@suse.de" date="972734400">- Update to glibc-2.2-20001028
- Enable more checks</changelog>
<changelog author="aj@suse.de" date="972648000">- Fix NoVersion patch</changelog>
<changelog author="kukuk@suse.de" date="972475200">- Update to glibc-2.2-20001025</changelog>
<changelog author="kukuk@suse.de" date="972216000">- Update to glibc 2.2-20001021
- Update glibc-db to 2.1.95
- Update ia64 patch</changelog>
<changelog author="kukuk@suse.de" date="972043200">- Update to glibc 2.2-20001020
- Add s390 spec file changes</changelog>
<changelog author="schwab@suse.de" date="971179200">- Update to glibc 2.2-20001009.
- Fix TRAMPOLINE_TEMPLATE for ia64.</changelog>
<changelog author="schwab@suse.de" date="970401600">- Export more ia64 specific symbols.</changelog>
<changelog author="kukuk@suse.de" date="969969600">- Update to glibc 2.2-20000926</changelog>
<changelog author="kukuk@suse.de" date="969883200">- Update to glibc 2.2-20000925 snapshot</changelog>
<changelog author="schwab@suse.de" date="968932800">- Update ia64 patch.</changelog>
<changelog author="bk@suse.de" date="968414400">- added glibc-2.1.3-db2-s390.tar.gz from developerworks (db2 fix)</changelog>
<changelog author="fober@suse.de" date="968241600">- merge s390-7.0 with STABLE:
  - upgraded to glibc-linuxthreads-2.1.3.1-s390.diff from 2.1.3
  - added new changes from IBM s390 codedrop
  - removed glibc-dlopen-2.1.3-s390.diff which is
    incorporated in glibc-linuxthreads-2.1.3.1-s390.diff now</changelog>
<changelog author="kukuk@suse.de" date="968155200">- Add glibc-2.1.security.dif</changelog>
<changelog author="olh@suse.de" date="967809600">- add glibc-2.1-ppc_lfs.dif, enables (hopefully) lfs on ppc</changelog>
<changelog author="olh@suse.de" date="967636800">- remove sysdeps/powerpc/memset.S on ppc for POWER3</changelog>
<changelog author="olh@suse.de" date="967464000">- add glibc-2.1.sgi_fam.dif
- remove sysdeps/rs6000/memcopy.h on ppc for POWER3</changelog>
<changelog author="garloff@suse.de" date="966859200">- Fix race on cond_wait WRT owner of mutex (from olh@suse.de)</changelog>
<changelog author="kukuk@suse.de" date="964526400">- Add mmap fix for PowerPC</changelog>
<changelog author="kukuk@suse.de" date="963316800">- Remove &quot;mutex is owned by current thread&quot; bugfix for IBMs jdk</changelog>
<changelog author="schwab@suse.de" date="962020800">- Update ia64 patch.</changelog>
<changelog author="kukuk@suse.de" date="961502400">- Move html docu in extra package
- Update ia64 patch</changelog>
<changelog author="kukuk@suse.de" date="959774400">- Remove LICENSE file, it's the same as COPYING.LIB
- Add libc docu as html</changelog>
<changelog author="kukuk@suse.de" date="959515200">- Fix ldconfig on PPC and IA64</changelog>
<changelog author="kukuk@suse.de" date="959428800">- Merge new ldconfig fixes</changelog>
<changelog author="kukuk@suse.de" date="959342400">- Update ia64 patch</changelog>
<changelog author="kukuk@suse.de" date="959342400">- Fix (f)truncate64 and xdr_uint8_t</changelog>
<changelog author="kukuk@suse.de" date="959169600">- Fix ldconfig.8 manual page</changelog>
<changelog author="bk@suse.de" date="958651200">- added s390 dlopen fix</changelog>
<changelog author="bk@suse.de" date="958478400">- updated s390 patches to match IBM_codedrop_2000_05_15</changelog>
<changelog author="kukuk@suse.de" date="958132800">- Fix netinet/in.h IPv6 compare</changelog>
<changelog author="schwab@suse.de" date="958132800">- Update ia64 patches.</changelog>
<changelog author="kukuk@suse.de" date="958132800">- Don't apply LFS patch</changelog>
<changelog author="kukuk@suse.de" date="957873600">- Add LFS patches</changelog>
<changelog author="kukuk@suse.de" date="957787200">- Add lot of bug fixes from CVS</changelog>
<changelog author="kukuk@suse.de" date="956664000">- Fix nscd/getgrnam bug</changelog>
<changelog author="kukuk@suse.de" date="956232000">- Remove /var/mail -&gt; /var/spool/mail patch
- Update nscd.conf.5 manual page</changelog>
<changelog author="kukuk@suse.de" date="955540800">- Add nscd patch from Chris Wing</changelog>
<changelog author="kukuk@suse.de" date="955540800">- Add ldconfig fix from aj@suse.de</changelog>
<changelog author="schwab@suse.de" date="955540800">- More ia64 patches.
- Use libc.so.0, libm.so.0, ld-linux-ia64.so.1 on ia64.</changelog>
<changelog author="kukuk@suse.de" date="955368000">- Support asm-sparc64 and asm-sparc on SPARC</changelog>
<changelog author="kukuk@suse.de" date="955368000">- Create /etc/ld.so.cache always with permissions 0644
- Update ia64 patches</changelog>
<changelog author="schwab@suse.de" date="955022400">- Fix dynamic linker bug in ia64.
- Add ia64 spinlocks for db2.</changelog>
<changelog author="schwab@suse.de" date="954849600">- New IA64 patches.
- Fix ldconfig -p.</changelog>
<changelog author="bk@suse.de" date="954763200">- s390 team added s390 patches</changelog>
<changelog author="kukuk@suse.de" date="953726400">- Fix last SPARC patch</changelog>
<changelog author="kukuk@suse.de" date="953640000">- Add SPARC patches
- Add IA64 patches</changelog>
<changelog author="kukuk@suse.de" date="953121600">- Remove personality call (problematic on Alpha)
- Fix typo in localeconv
- alpha/ioperm.c&gt; Add entry for &quot;Nautilus&quot;.</changelog>
<changelog author="kukuk@suse.de" date="952430400">- Add locale SIGSEGV fix
- Fix getdate bug</changelog>
<changelog author="kukuk@suse.de" date="951480000">- Update to final glibc 2.1.3 + fix for bigendian machines</changelog>
<changelog author="kukuk@suse.de" date="951393600">- Update to current glibc cvs snapshot
- Add libnss_dns6.so.2, which makes IPv4 and IPv6 lookups.
  Old libnss_dns.so.2 will only make IPv4 lookups.</changelog>
<changelog author="kukuk@suse.de" date="951220800">- Update to current glibc cvs snapshot (2.1.3pre4)</changelog>
<changelog author="kukuk@suse.de" date="949752000">- Add missing defines for SPARC bits/termios.h</changelog>
<changelog author="kukuk@suse.de" date="949579200">- Add regex patch from Andreas Schwab</changelog>
<changelog author="kukuk@suse.de" date="949492800">- Add ldconfig fix
- Update to current glibc cvs snapshot
- Fix sys/io.h on Intel (C++)</changelog>
<changelog author="kukuk@suse.de" date="948715200">- Fix duplicate setrlimit</changelog>
<changelog author="kukuk@suse.de" date="948715200">- Update to current glibc cvs snapshot</changelog>
<changelog author="kukuk@suse.de" date="948283200">- Update to current glibc cvs snapshot</changelog>
<changelog author="ro@suse.de" date="947937600">-fixed ppc db2-patch</changelog>
<changelog author="kukuk@suse.de" date="947851200">- Add patches for Intel and PPC</changelog>
<changelog author="kukuk@suse.de" date="947851200">- Add patch for SPARC</changelog>
<changelog author="kukuk@suse.de" date="947764800">- Move info pages to /usr/share/info</changelog>
<changelog author="kukuk@suse.de" date="947505600">- Add ipv6 patches for getent</changelog>
<changelog author="kukuk@suse.de" date="947505600">- Move manual pages for applications and config files into
  shlibs package
- Update to current glibc 2.1.3 snapshot</changelog>
<changelog author="kukuk@suse.de" date="945432000">- Add new ldconfig patches
- Add aio patch
- Add fix for bits/string2.h</changelog>
<changelog author="kukuk@suse.de" date="945259200">- add ldconfig.8</changelog>
<changelog author="kukuk@suse.de" date="945259200">- Update to current glibc 2.1.3 snapshot
- Fix get/setrlimit problems</changelog>
<changelog author="kukuk@suse.de" date="944740800">- Update to current glibc 2.1.3 snapshot
- Add new ldconfig</changelog>
<changelog author="kukuk@suse.de" date="944395200">- Disable make check for SPARC (kernel bug)
- Add setrlimit patches
- Update to current glibc 2.1.3 snapshot</changelog>
<changelog author="kukuk@suse.de" date="943617600">- Update to current glibc 2.1.3 snapshot.</changelog>
<changelog author="kukuk@suse.de" date="940939200">- Add fix for correct accounting of needed bytes (gethnamaddr.c)
- Remove not exported, public names from internal md5 functions</changelog>
<changelog author="kukuk@suse.de" date="940852800">- Add fix for missing nexttowardl aliase</changelog>
<changelog author="kukuk@suse.de" date="940334400">- Add security fix for iruserok</changelog>
<changelog author="kukuk@suse.de" date="940075200">- Build libNoVersion.so.1 on every platform</changelog>
<changelog author="kukuk@suse.de" date="939643200">- Add linuxthreads/signals.c fix from Andreas Schwab
- Remove dangling symlink (Bug #544)
- Add more bug fixes</changelog>
<changelog author="kukuk@suse.de" date="939384000">- Add timezone update</changelog>
<changelog author="kukuk@suse.de" date="939384000">- Add NIS+ shadow parser fix</changelog>
<changelog author="kukuk@suse.de" date="939297600">- Update to official glibc 2.1.2, add important fixes
- Update nscd, add manual pages for it</changelog>
<changelog author="ro@suse.de" date="937828800">- libc: added requires kernel_headers</changelog>
<changelog author="bs@suse.de" date="937224000">- ran old prepare_spec on spec file to switch to new prepare_spec.</changelog>
<changelog author="kukuk@suse.de" date="936619200">- Update to current glibc 2.1.2 cvs snapshot
- Remove use auf automake in spec file</changelog>
<changelog author="kukuk@suse.de" date="936360000">- Update to current glibc 2.1.2 cvs snapshot
- Use RPM macros for configure</changelog>
<changelog author="kukuk@suse.de" date="935582400">- Update to current glibc 2.1.2 cvs snapshot</changelog>
<changelog author="kukuk@suse.de" date="935064000">- Add PowerPC patches from Uli Hecht
- Cleanup of SPEC file
- Create a profiling version</changelog>
<changelog author="kukuk@suse.de" date="934632000">- disable nscd hosts caching by default
- Apply patch from HJL for broken gethostbyname_r in libnss_dns</changelog>
<changelog author="kukuk@suse.de" date="932126400">- Add header fix for autoconf/g++
- Move pt_chown and gconv modules from libc to shlibs</changelog>
<changelog author="kukuk@suse.de" date="931953600">- Remove /etc/localtime from filelist</changelog>
<changelog author="kukuk@suse.de" date="931780800">- Add more bug fixes from cvs
- Add ld.so bug fix from Andreas Schwab</changelog>
<changelog author="kukuk@suse.de" date="931435200">- configure for i386-unknown-linux</changelog>
<changelog author="kukuk@suse.de" date="931348800">- Remove alpha patch, it's now in glibc 2.1.2 cvs
- Add more bug fixes from cvs
- Remove malloc patch (breaks StarOffice)</changelog>
<changelog author="kukuk@suse.de" date="931262400">- Add openpty patch from Andreas Schwab
  (openpty now works if /dev/pts is not mounted)</changelog>
<changelog author="kukuk@suse.de" date="930916800">- Remove warning von zic about symlinks.</changelog>
<changelog author="kukuk@suse.de" date="930571200">- Remove ndbm links, now in gdbm</changelog>
<changelog author="kukuk@suse.de" date="930312000">- Add a lot of more fixes
- Add nscd fixes and enable nscd on alpha</changelog>
<changelog author="kukuk@suse.de" date="929361600">- Add nss_dns and fget* fixes.
- Add nscd patches for NIS+</changelog>
<changelog author="kukuk@suse.de" date="929016000">- Fix daemon() for MT programs
- Add libio fixes</changelog>
<changelog author="kukuk@suse.de" date="927892800">- Add fix for docu
- Disable nscd for alpha again</changelog>
<changelog author="kukuk@suse.de" date="927720000">- Update to version 2.1.1</changelog>
<changelog author="kukuk@suse.de" date="926942400">- Update to snapshot from 16.5.1999
- Add manpages
- Add __setfpucw to libNoVersion (intel)
- Add COPYING and COPYING.LIB</changelog>
<changelog author="kukuk@suse.de" date="926078400">- Update to snapshot from 6.5.1999
- Add NoVersion patches from RedHat for miscompiled glibc 2.0 apps
- Add patch for Alpha RX164
- Add workaround for nscd on Alpha</changelog>
<changelog author="kukuk@suse.de" date="925300800">- Remove latest fnmatch patches from Uli Drepper</changelog>
<changelog author="kukuk@suse.de" date="925214400">- update to cvs version of Apr 26 1999
- fix pmap_set/pmap_unset for DHCP clients
- Rename libdb1.so.2[.1] to libdb.so.2[.1] since we don't create
  the symbolic links.</changelog>
<changelog author="kukuk@suse.de" date="924609600">- update to cvs version of Apr 20 1999
- remove sunrpc.diff
- fix nssv1 package
- only include nscd on intel
- install /etc/nscd.conf</changelog>
<changelog author="kukuk@suse.de" date="923918400">- update to cvs version of Apr 11 1999
- Fix paths in paths.h
- install linuxthreads man pages and documentation
- Add sunrpc patch for Alpha and security fixes
- added links for el_GR and ru_RU.KOI8-R in usr/share/locale</changelog>
<changelog author="bs@suse.de" date="922881600">- don't use lx_hack for build</changelog>
<changelog author="ro@suse.de" date="921585600">- libc.texinfo: changed to build with stable texinfo version</changelog>
<changelog author="ro@suse.de" date="921499200">- update to 2.1.1 (cvs of Mar 15 1999)
- update nssv1 to 2.0.2</changelog>
<changelog author="ro@suse.de" date="919512000">- fixed specfile (lddlibc4 not built on alpha)</changelog>
<changelog author="ro@suse.de" date="919512000">- fixed specfile ...</changelog>
<changelog author="ro@suse.de" date="919512000">- added automake to neededforbuild</changelog>
<changelog author="ro@suse.de" date="919512000">- added nss-v1 modules (to keep old rpm happy with file owners)</changelog>
<changelog author="ro@suse.de" date="919425600">- update to cvs-version of 1999/02/18</changelog>
<changelog author="ro@suse.de" date="906724800">- fixed specfile</changelog>
<changelog author="ro@suse.de" date="906724800">- update: use cvs-version of 980925
  edited db/Makefile to ignore messed up target-dependency</changelog>
<changelog author="ro@suse.de" date="906379200">- update: use cvs-version of 980921</changelog>
<changelog author="ro@suse.de" date="905774400">- update: use today's cvs-version</changelog>
<changelog author="ro@suse.de" date="904737600">- build for 586 since egcs generates code for 686 that does NOT run
  on 586 !!! (eg strtok)</changelog>
<changelog author="ro@suse.de" date="903700800">- updated to cvs-version 20.8.98
  added gettext as neededforbuild (so configure shuts up)
  glibc-linuxthreads is contained in main archive now</changelog>
<changelog author="ro@suse.de" date="897998400">- added symlink usr/include/X11</changelog>
<changelog author="ro@suse.de" date="896356800">- added symlinks to linux include files</changelog>
<changelog author="bs@suse.de" date="896356800">- moved &quot;.so&quot; Links to package libc.</changelog>
<changelog author="bs@suse.de" date="896270400">- changed version do `date`</changelog>
<changelog author="ro@suse.de" date="896270400">- created specfile to build libc, shlibs, libd, libcinfo
    localedb, timezone,
- former libc renamed to libc5.</changelog>
</package>
<package pkgid="89ccb856e72b96e61efa9eea3615f04b304c067e" name="timezone" arch="i586">
<version epoch="0" ver="2011c" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1299931200">- update to 2011c:
  * northamerica  Replace Juneau with Juneau, Sitka, and Metlakatla.
  * southamerica  Delay end of DST in 2011 until first Sunday in April.</changelog>
<changelog author="dmueller@suse.de" date="1297857600">- update to 2011b:
  * updates for australasia and northamerica</changelog>
<changelog author="dmueller@suse.de" date="1288699200">- update to 2010o:
  * fix Pacific/Apia and Austalasia/Fiji</changelog>
<changelog author="dmueller@suse.de" date="1286280000">- update to 2010m:
  * fix historic data of Antarctica/Vostok</changelog>
<changelog author="dmueller@suse.de" date="1285070400">- change execlp into execl</changelog>
<changelog author="ro@suse.de" date="1282737600">- add missing sentinel to tzcode-link.diff</changelog>
<changelog author="pbaudis@suse.cz" date="1282651200">- Make zic -l do a copy when hardlinking fails (e.g. because /usr
  being on a separate partition) [bnc#607532]</changelog>
<changelog author="ro@suse.de" date="1282219200">- un-fuzz patches to fix build</changelog>
<changelog author="pbaudis@suse.cz" date="1282219200">- update tzdata to 2010l
  * DST changes: Africa/Cairo, Africa/Casablanca, Asia/Gaza,
    America/Argentina/San_Luis
  * New zones: America/Bahia_Banderas
  * Historical changes: Asia/Taipei, Europe/Helsinki
  * Spelling changes: Pacific/Chuuk, Pacific/Pohnpei</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pbaudis@suse.cz" date="1270555200">- update tzdata to 2010h:
  * DST changes: Asia/Dhaka (again...), Asia/Karachi, Asia/Gaza,
    Asia/Damascus, Pacific/Apia, Africa/Tunis
  * GMT offset changes: Europe/Samara, Asia/Kamchatka, Asia/Anadyr
  * Various Antarctica timezone changes</changelog>
<changelog author="pbaudis@suse.cz" date="1268913600">- cleanup; changes since 2009u are:
  * DST changes: Asia/Dhaka (yet again), Pacific/Fiji, Pacific/Apia,
    America/Santiago, Pacific/Easter, America/Asuncion
  * New zones: America/Matamoros, America/Ojinaga, America/Santa_Isabel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1268568000">- Update to 2010e, including Chile's emergency DST changes
- Update code to 2010c - mostly just cleanups</changelog>
<changelog author="pbaudis@suse.cz" date="1262692800">- update tzdata to 2009u:
  * DST changes: Asia/Damascus, Asia/Dhaka, Pacific/Fiji
  * GMT offset changes: some bases in Antartica
  * New zones: Asia/Novokuznetsk
  * Historical changes: Asia/Hong_Kong
- typo fix in Asia/Dhaka Jun 2009 transition rule</changelog>
<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="pbaudis@suse.cz" date="1256558400">- update data to 2009p - Argentina switch to DST</changelog>
<changelog author="pbaudis@suse.cz" date="1256299200">- update data to 2009o:
  * DST changes: Asia/Karachi, Asia/Dhaka
- Apply a patch for changes in Argentina DST: Argentina is not
  switching to DST, except America/Argentina/SanLuis; version number
  modified to 2009oa to reflect the extra patch.</changelog>
<changelog author="pbaudis@suse.cz" date="1252929600">- The abbreviation definition of GB should be United Kingdom instead
  of Britain (UK) [bnc#519410]</changelog>
<changelog author="pbaudis@suse.cz" date="1252411200">- update data to 2009m:
  * DST changes: Africa/Cairo, Indian/Mauritius, Asia/Dhaka,
    Asia/Karachi, Asia/Gaza, Pacific/Apia
  * Fix bad DST information since 2002: Asia/Amman
- update code to 2009k:
  * zic tried to generate wrong POSIX tz string in a pathological case</changelog>
<changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
<changelog author="werner@suse.de" date="1240315200">- Use Unversial time zone for posixrules
- Use mktemp from coreutiles for temporary file</changelog>
<changelog author="pbaudis@suse.cz" date="1238068800">- update to 2009d:
  * DST changes: Africa/Casablanca, Africa/Tunis, Asia/Damascus,
    America/Argentina/San_Luis</changelog>
</package>
<package pkgid="6eece08f7c738bd67818b2abffe17386d9493349" name="timezone" arch="x86_64">
<version epoch="0" ver="2011c" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1299931200">- update to 2011c:
  * northamerica  Replace Juneau with Juneau, Sitka, and Metlakatla.
  * southamerica  Delay end of DST in 2011 until first Sunday in April.</changelog>
<changelog author="dmueller@suse.de" date="1297857600">- update to 2011b:
  * updates for australasia and northamerica</changelog>
<changelog author="dmueller@suse.de" date="1288699200">- update to 2010o:
  * fix Pacific/Apia and Austalasia/Fiji</changelog>
<changelog author="dmueller@suse.de" date="1286280000">- update to 2010m:
  * fix historic data of Antarctica/Vostok</changelog>
<changelog author="dmueller@suse.de" date="1285070400">- change execlp into execl</changelog>
<changelog author="ro@suse.de" date="1282737600">- add missing sentinel to tzcode-link.diff</changelog>
<changelog author="pbaudis@suse.cz" date="1282651200">- Make zic -l do a copy when hardlinking fails (e.g. because /usr
  being on a separate partition) [bnc#607532]</changelog>
<changelog author="ro@suse.de" date="1282219200">- un-fuzz patches to fix build</changelog>
<changelog author="pbaudis@suse.cz" date="1282219200">- update tzdata to 2010l
  * DST changes: Africa/Cairo, Africa/Casablanca, Asia/Gaza,
    America/Argentina/San_Luis
  * New zones: America/Bahia_Banderas
  * Historical changes: Asia/Taipei, Europe/Helsinki
  * Spelling changes: Pacific/Chuuk, Pacific/Pohnpei</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pbaudis@suse.cz" date="1270555200">- update tzdata to 2010h:
  * DST changes: Asia/Dhaka (again...), Asia/Karachi, Asia/Gaza,
    Asia/Damascus, Pacific/Apia, Africa/Tunis
  * GMT offset changes: Europe/Samara, Asia/Kamchatka, Asia/Anadyr
  * Various Antarctica timezone changes</changelog>
<changelog author="pbaudis@suse.cz" date="1268913600">- cleanup; changes since 2009u are:
  * DST changes: Asia/Dhaka (yet again), Pacific/Fiji, Pacific/Apia,
    America/Santiago, Pacific/Easter, America/Asuncion
  * New zones: America/Matamoros, America/Ojinaga, America/Santa_Isabel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1268568000">- Update to 2010e, including Chile's emergency DST changes
- Update code to 2010c - mostly just cleanups</changelog>
<changelog author="pbaudis@suse.cz" date="1262692800">- update tzdata to 2009u:
  * DST changes: Asia/Damascus, Asia/Dhaka, Pacific/Fiji
  * GMT offset changes: some bases in Antartica
  * New zones: Asia/Novokuznetsk
  * Historical changes: Asia/Hong_Kong
- typo fix in Asia/Dhaka Jun 2009 transition rule</changelog>
<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="pbaudis@suse.cz" date="1256558400">- update data to 2009p - Argentina switch to DST</changelog>
<changelog author="pbaudis@suse.cz" date="1256299200">- update data to 2009o:
  * DST changes: Asia/Karachi, Asia/Dhaka
- Apply a patch for changes in Argentina DST: Argentina is not
  switching to DST, except America/Argentina/SanLuis; version number
  modified to 2009oa to reflect the extra patch.</changelog>
<changelog author="pbaudis@suse.cz" date="1252929600">- The abbreviation definition of GB should be United Kingdom instead
  of Britain (UK) [bnc#519410]</changelog>
<changelog author="pbaudis@suse.cz" date="1252411200">- update data to 2009m:
  * DST changes: Africa/Cairo, Indian/Mauritius, Asia/Dhaka,
    Asia/Karachi, Asia/Gaza, Pacific/Apia
  * Fix bad DST information since 2002: Asia/Amman
- update code to 2009k:
  * zic tried to generate wrong POSIX tz string in a pathological case</changelog>
<changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
<changelog author="werner@suse.de" date="1240315200">- Use Unversial time zone for posixrules
- Use mktemp from coreutiles for temporary file</changelog>
<changelog author="pbaudis@suse.cz" date="1238068800">- update to 2009d:
  * DST changes: Africa/Casablanca, Africa/Tunis, Asia/Damascus,
    America/Argentina/San_Luis</changelog>
</package>
<package pkgid="3a345f004b01c461d5753f286ae5b9cc593dda5d" name="timezone" arch="src">
<version epoch="0" ver="2011c" rel="0.3.1"/>
<changelog author="dmueller@suse.de" date="1299931200">- update to 2011c:
  * northamerica  Replace Juneau with Juneau, Sitka, and Metlakatla.
  * southamerica  Delay end of DST in 2011 until first Sunday in April.</changelog>
<changelog author="dmueller@suse.de" date="1297857600">- update to 2011b:
  * updates for australasia and northamerica</changelog>
<changelog author="dmueller@suse.de" date="1288699200">- update to 2010o:
  * fix Pacific/Apia and Austalasia/Fiji</changelog>
<changelog author="dmueller@suse.de" date="1286280000">- update to 2010m:
  * fix historic data of Antarctica/Vostok</changelog>
<changelog author="dmueller@suse.de" date="1285070400">- change execlp into execl</changelog>
<changelog author="ro@suse.de" date="1282737600">- add missing sentinel to tzcode-link.diff</changelog>
<changelog author="pbaudis@suse.cz" date="1282651200">- Make zic -l do a copy when hardlinking fails (e.g. because /usr
  being on a separate partition) [bnc#607532]</changelog>
<changelog author="ro@suse.de" date="1282219200">- un-fuzz patches to fix build</changelog>
<changelog author="pbaudis@suse.cz" date="1282219200">- update tzdata to 2010l
  * DST changes: Africa/Cairo, Africa/Casablanca, Asia/Gaza,
    America/Argentina/San_Luis
  * New zones: America/Bahia_Banderas
  * Historical changes: Asia/Taipei, Europe/Helsinki
  * Spelling changes: Pacific/Chuuk, Pacific/Pohnpei</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="pbaudis@suse.cz" date="1270555200">- update tzdata to 2010h:
  * DST changes: Asia/Dhaka (again...), Asia/Karachi, Asia/Gaza,
    Asia/Damascus, Pacific/Apia, Africa/Tunis
  * GMT offset changes: Europe/Samara, Asia/Kamchatka, Asia/Anadyr
  * Various Antarctica timezone changes</changelog>
<changelog author="pbaudis@suse.cz" date="1268913600">- cleanup; changes since 2009u are:
  * DST changes: Asia/Dhaka (yet again), Pacific/Fiji, Pacific/Apia,
    America/Santiago, Pacific/Easter, America/Asuncion
  * New zones: America/Matamoros, America/Ojinaga, America/Santa_Isabel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1268568000">- Update to 2010e, including Chile's emergency DST changes
- Update code to 2010c - mostly just cleanups</changelog>
<changelog author="pbaudis@suse.cz" date="1262692800">- update tzdata to 2009u:
  * DST changes: Asia/Damascus, Asia/Dhaka, Pacific/Fiji
  * GMT offset changes: some bases in Antartica
  * New zones: Asia/Novokuznetsk
  * Historical changes: Asia/Hong_Kong
- typo fix in Asia/Dhaka Jun 2009 transition rule</changelog>
<changelog author="jengelh@medozas.de" date="1260273600">- enable parallel building</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="pbaudis@suse.cz" date="1256558400">- update data to 2009p - Argentina switch to DST</changelog>
<changelog author="pbaudis@suse.cz" date="1256299200">- update data to 2009o:
  * DST changes: Asia/Karachi, Asia/Dhaka
- Apply a patch for changes in Argentina DST: Argentina is not
  switching to DST, except America/Argentina/SanLuis; version number
  modified to 2009oa to reflect the extra patch.</changelog>
<changelog author="pbaudis@suse.cz" date="1252929600">- The abbreviation definition of GB should be United Kingdom instead
  of Britain (UK) [bnc#519410]</changelog>
<changelog author="pbaudis@suse.cz" date="1252411200">- update data to 2009m:
  * DST changes: Africa/Cairo, Indian/Mauritius, Asia/Dhaka,
    Asia/Karachi, Asia/Gaza, Pacific/Apia
  * Fix bad DST information since 2002: Asia/Amman
- update code to 2009k:
  * zic tried to generate wrong POSIX tz string in a pathological case</changelog>
<changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
<changelog author="werner@suse.de" date="1240315200">- Use Unversial time zone for posixrules
- Use mktemp from coreutiles for temporary file</changelog>
<changelog author="pbaudis@suse.cz" date="1238068800">- update to 2009d:
  * DST changes: Africa/Casablanca, Africa/Tunis, Asia/Damascus,
    America/Argentina/San_Luis</changelog>
<changelog author="schwab@suse.de" date="1235476800">- Don't copy directory into itself.</changelog>
<changelog author="dmueller@suse.de" date="1235390400">- update to 2009b:
  * leapseconds: updated to reflect no mid-2009 leap second
  * zic.c: fix fence-post error (fixes corrupt timezone
  database)</changelog>
<changelog author="dmueller@suse.de" date="1233662400">- update to 2009a:
  * asia
    change Katmandu to Kathmandu
  * backward
    provide Katmandu link
  * europe
    correct Swiss rules
  * northamerica
    clearer definition of Cuban transitions (no binary change)
    Resolute changes abbreviation (but not time) twice a year</changelog>
<changelog author="dmueller@suse.de" date="1228305600">- update to 2008i:
  * South America Updates (corrections to Argentina DST rules)
  * US zone reordering and recommenting</changelog>
<changelog author="pbaudis@suse.cz" date="1224072000">- Add coreutils to the prerequisites [bnc#420365]</changelog>
<changelog author="pbaudis@suse.cz" date="1223899200">- update to 2008h: Fix DST for Indian/Mauritius and Asia/Damascus</changelog>
<changelog author="dmueller@suse.de" date="1223553600">- update to 2008g:
  * Pakistan, Mauritius, Gaza, Argentina, Brazil, Mongolia,
    Morocco, Cuba, Chile</changelog>
<changelog author="mvyskocil@suse.cz" date="1222689600">- Moved the timezone-java to separate specfile (adrian's request for better
  bootstrapping of SUSE)</changelog>
<changelog author="mvyskocil@suse.cz" date="1221048000">- Remove a rht renaming hack, because is not necessary in SUSE's build system
  and move the javazic to a new package
- Use a gcc-gij as a default java implementation
- Use a %setup macro instead of tar -xf
- Use javazi as a destination directory for java zone info files.</changelog>
<changelog author="mvyskocil@suse.cz" date="1220616000">- Add new java subpackage (necessary for openjdk)</changelog>
<changelog author="pbaudis@suse.cz" date="1212494400">- Update to version 2008c (Marocco, Mongolia, Pakistan DST changes)
  [bnc#396308]</changelog>
<changelog author="pbaudis@suse.cz" date="1207137600">- Update to version 2008b (esp. Chile, Cuba, Iraq, Syria DST changes)
  [bnc#368760]</changelog>
<changelog author="pbaudis@suse.cz" date="1201262400">- Update to version 2007k (esp. Argentina DST change) [#350489]</changelog>
<changelog author="schwab@suse.de" date="1200484800">- Use RPM_OPT_FLAGS.</changelog>
<changelog author="pbaudis@suse.cz" date="1196942400">- Update to version 2007j (esp. Venezuela time shift)</changelog>
<changelog author="pbaudis@suse.cz" date="1191758400">- Update to version 2007h</changelog>
<changelog author="pbaudis@suse.cz" date="1189252800">- Fix %post script to work in patch RPMs as well</changelog>
<changelog author="pbaudis@suse.cz" date="1187697600">- Update to version 2007g</changelog>
<changelog author="pbaudis@suse.cz" date="1186574400">- Fix %post if /etc/localtime doesn't exist yet</changelog>
<changelog author="pbaudis@suse.cz" date="1186142400">- Split timezone package to a separate physical package</changelog>
<changelog author="aj@suse.de" date="1185537600">- Use fdupes to reduce timezone data size.</changelog>
<changelog author="schwab@suse.de" date="1184328000">- Update to head of glibc-2.6 branch.
- Fix update on ppc.</changelog>
<changelog author="matz@suse.de" date="1183032000">- Add a provide for &quot;rtld(GNU_HASH)&quot;.</changelog>
<changelog author="schwab@suse.de" date="1182081600">- Fix section selection in crt objects.</changelog>
<changelog author="pbaudis@suse.cz" date="1181217600">- Backport fix for crashing printf() of some invalid ldouble values</changelog>
<changelog author="pbaudis@suse.cz" date="1180526400">- Added few fixes from 2.6 CVS before 2.6.1 gets released</changelog>
<changelog author="pbaudis@suse.cz" date="1179489600">- Update glibc to version 2.6
- Update tzdata to version 2007f</changelog>
<changelog author="schwab@suse.de" date="1178280000">- Update build checks.</changelog>
<changelog author="dmueller@suse.de" date="1177070400">- only keep symtab for libpthread*</changelog>
<changelog author="pbaudis@suse.cz" date="1176984000">- Fix strtod() exponent limit calculations [#230909]
- Fix random nscd crashes under very heavy passwd/group queries
  load [#192391]
- Add some enums from CVS to sys/personality.h [#253710]
- Fix pthread_atfork()-induced hangs in threaded programs [#256237]
- Fix llrintl() on ppc64 [#241183]
- Fix makecontext() segfault [#249780]
- Fix potential dladdr() breakage [#241464]
- Fix some races in client programs with nscd garbage collection [#252138]</changelog>
<changelog author="pbaudis@suse.cz" date="1175256000">- Update localtime during timezone update [#239888]</changelog>
<changelog author="olh@suse.de" date="1174824000">- temporary disable powerpc cputuned libs to reduce turnaround time</changelog>
<changelog author="pbaudis@suse.cz" date="1171022400">- Update to the latest upstream timezone data [#231833]</changelog>
<changelog author="schwab@suse.de" date="1170417600">- Remove -ffortify.</changelog>
<changelog author="schwab@suse.de" date="1170331200">- Remove -fstack-protector.</changelog>
<changelog author="sbrabec@suse.cz" date="1170072000">- Removed references to /opt/gnome.</changelog>
<changelog author="olh@suse.de" date="1169726400">- link power4 to ppc970, link power6 to power6x
- Update the powerpc cpu-tuned environment to v0.05</changelog>
<changelog author="schwab@suse.de" date="1169467200">- Update ppc build check.</changelog>
<changelog author="pbaudis@suse.cz" date="1164369600">- Fix for Brazilian and Wester Australia timezone DSTs [#213375,#223196]</changelog>
<changelog author="pbaudis@suse.cz" date="1163678400">- Disable power6 optimization for 10.2, not all pieces are there
  [#219962]</changelog>
<changelog author="pbaudis@suse.cz" date="1161777600">- Change ld.so madvise() call to posix_fadvise()
- Fix mallopt(M_MXFAST,0) behaviour [#198760]
- Update the powerpc cpu-tuned environment to v0.04 [#215117]</changelog>
<changelog author="pbaudis@suse.cz" date="1161518400">- Update the powerpc cpu-tuned environment to v0.03 [#212549]
- Improve glibc powerpc optimization [#212548,#212580,#214282]</changelog>
<changelog author="mls@suse.de" date="1161086400">- add ldconfig-old-cache patch to speed up ldconfig</changelog>
<changelog author="olh@suse.de" date="1160827200">- dont use uninitialized (and wrong) variable in glibc-2.4.90-bdirect.diff
  [#212470]</changelog>
<changelog author="pbaudis@suse.cz" date="1160654400">- Update to the latest 2.5 CVS
- More friendly -Bdirect behaviour in case of missing libraries
- Fix 2.4.90-nscd patch wrt. new gcc</changelog>
<changelog author="aj@suse.de" date="1159790400">- Fix warnings in testsuite (patch from CVS).</changelog>
<changelog author="pbaudis@suse.cz" date="1159531200">- Update to 2.5 CVS - official release (only minimal changes in CVS
  since the last update)
- Fix a thinko in the -Bdirect patch</changelog>
<changelog author="dmueller@suse.de" date="1159531200">- fix devel requires</changelog>
<changelog author="pbaudis@suse.cz" date="1159531200">- Make the dynamic linker support direct bindings (Michael Meeks'
  Solaris-like -Bdirect with minor changes by me)
- Split the kernel headers to a new package (linux-kernel-headers)</changelog>
<changelog author="schwab@suse.de" date="1159358400">- Fix broken assertion [#208189].</changelog>
<changelog author="pbaudis@suse.cz" date="1159272000">- Fix mistake when removing some patches</changelog>
<changelog author="pbaudis@suse.cz" date="1159185600">- Update to current CVS</changelog>
<changelog author="pbaudis@suse.cz" date="1159012800">- Fix 64bit-cleanliness gcc warnings</changelog>
<changelog author="pbaudis@suse.cz" date="1158840000">- Add /usr/lib{,64}/Xaw3d to /etc/ld.so.conf (by schwab@suse.de,
  from original STABLE) [#205169]
- Fix chown() instead of lchown() called in fchownat() emulation
  [#201751]
- Fix glob() overflowing stack when producing massive number of
  matches [#190458]
- Update to current CVS</changelog>
<changelog author="pbaudis@suse.cz" date="1158753600">- Fix cut'n'paste error in a last-minute change</changelog>
<changelog author="pbaudis@suse.cz" date="1158753600">- Update to current CVS
- Fix powerpc-cpu tarball extension
- Move crypt-blowfish to a patch so that quilt works on the tree</changelog>
<changelog author="schwab@suse.de" date="1157198400">- Use asm-powerpc for ppc and ppc64.
- Fix chroot check in glibc_post_upgrade.</changelog>
<changelog author="pbaudis@suse.cz" date="1156766400">- Update to current CVS, should fix false positive heap overflow
  trigger from malloc() causing gcc to hang [#201724]</changelog>
<changelog author="pbaudis@suse.cz" date="1156334400">- Update the powerpc cpu-tuned environment to v0.02 [#199274]
- Update to current CVS
- Drop pthread_mutexattr_getprioceiling() out of range fix</changelog>
<changelog author="pbaudis@suse.cz" date="1155211200">Ported from STABLE:
- Remove libc5 reference from /etc/ld.so.conf, shlibs5 is no longer
  supported [#181947]
- Fix name of a dummy ia64 header from offsets.h to asm-offsets.h
  [#191394]</changelog>
<changelog author="pbaudis@suse.cz" date="1154260800">- Update to current CVS snapshot (highlight: support for .gnu.hash
  fast linking support)</changelog>
<changelog author="pbaudis@suse.cz" date="1152705600">- pthread_mutexattr_getprioceiling() was returning prioceiling out
  of range [#182782]</changelog>
<changelog author="pbaudis@suse.cz" date="1152705600">- Fix the HTML documentation missing an index [#190585]</changelog>
<changelog author="kukuk@suse.de" date="1151150400">- Update to current CVS snapshot
- Update to kernel-headers 2.6.17
- Remove HZ define (sysconf(_SC_CLK_TCK) instead)</changelog>
<changelog author="kukuk@suse.de" date="1150200000">- Update to current CVS snapshot</changelog>
<changelog author="pbaudis@suse.cz" date="1146571200">- Fix bad memset() size in NTPL code [#159184]</changelog>
<changelog author="kukuk@suse.de" date="1146571200">- asm-powerpc/page.h: Don't move #ifdef __KERNEL__ [#171010]
- bits/mman.h: Fix value of MADV_REMOVE [#170734]</changelog>
<changelog author="kukuk@suse.de" date="1145880000">- Fix china timezone mess [#163674]
- Don't include linux/stddef.h [#167964]</changelog>
<changelog author="schwab@suse.de" date="1145361600">- Sanitize &lt;asm-powerpc/sigcontext.h&gt;.</changelog>
<changelog author="kukuk@suse.de" date="1144929600">- Add /usr/include/linux/taskstats.h [#141936]</changelog>
<changelog author="kukuk@suse.de" date="1144756800">- nptl/init.c (sigcancel_handler): Compare with correct PID even
  if the thread is in the middle of a fork call.
  (sighandler_setxid): Likewise.</changelog>
<changelog author="ihno@suse.de" date="1144584000">- S390 fix for startupcode. Part of it was not PIC.</changelog>
<changelog author="kukuk@suse.de" date="1144411200">- Don't hardcode syscall numbers at our own</changelog>
<changelog author="schwab@suse.de" date="1144152000">- Fix readlink declaration.</changelog>
<changelog author="kukuk@suse.de" date="1144065600">- Update from CVS:
  - nscd bug fixes
  - Match return value of readlink to what POSIX says
  - Fix NIS+ checks for NULL pointer</changelog>
<changelog author="dmueller@suse.de" date="1143979200">- Fix clients crash if nscd is unresponsive (glibc-#2501)
- Fix fd leak in nscd daemon (glibc-#2498)</changelog>
<changelog author="schwab@suse.de" date="1143892800">- Fix &lt;sys/procfs.h&gt; on ppc64.</changelog>
<changelog author="schwab@suse.de" date="1143806400">- Extend last change also to ppc64.</changelog>
<changelog author="schwab@suse.de" date="1143374400">- Terminate FDE before clone syscall.</changelog>
<changelog author="ro@suse.de" date="1143201600">- kernel-headers: asm-powerpc: define PAGE_MASK in page.h</changelog>
<changelog author="kukuk@suse.de" date="1142856000">- Update to final 2.6.16 kernel headers
- Update to current CVS:
  - Don't use TLS before setting it up.
  - Fix rounding of long doubles on ppc64.
  - Correct usage of cfi_offset on ppc/ppc64.
  - Fix memory leak in dlopen.</changelog>
<changelog author="schwab@suse.de" date="1142337600">- Update fnmatch patch.</changelog>
<changelog author="kukuk@suse.de" date="1141992000">- Disable unshare() syscall (request of kernel developer)</changelog>
<changelog author="kukuk@suse.de" date="1141992000">- Don't include linux/interrupt.h from linux/rtc.h
- Revert last change to linux/input.h, disable struct
- Update to current CVS (nptl/ia64 fix)</changelog>
<changelog author="kukuk@suse.de" date="1141905600">- Fix linux/input.h for userspace inclusion</changelog>
<changelog author="kukuk@suse.de" date="1141819200">- Update kernel headers to 2.6.16-rc5</changelog>
<changelog author="kukuk@suse.de" date="1141646400">- Update to 2.4 CVS
  - official release
  - Fix free on ppc [#155374]
  - Various sysconf() fixes</changelog>
<changelog author="kukuk@suse.de" date="1141473600">- Update to CVS
  - ldconfig/prelink fixes</changelog>
<changelog author="aj@suse.de" date="1141387200">- Do not leave hyphens in defines in create_biarch_asm.sh (Bug 154998).</changelog>
<changelog author="kukuk@suse.de" date="1141387200">- Update to CVS
  - Fix ftw test suite failures
  - Fix alignment of malloc for long double</changelog>
<changelog author="kukuk@suse.de" date="1141300800">- Update to 2.3.91 CVS
  - Fix 6arg syscall on s390x
  - memccpy fix on IA64</changelog>
<changelog author="kukuk@suse.de" date="1141214400">- Update to CVS
  - New linkat interface
  - Update from tzdata2006b
  - Define MADV_DONTFORK and MADV_DOFORK.
  - Add robust mutex to NPTL</changelog>
<changelog author="kukuk@suse.de" date="1140696000">- Reenable power optimized code again [#142839]</changelog>
<changelog author="kukuk@suse.de" date="1139745600">- Disable power optimized code</changelog>
<changelog author="kukuk@suse.de" date="1139486400">- Update to CVS
  - Add unshare prototype
  - Add memory barrier on i386/NPTL</changelog>
<changelog author="kukuk@suse.de" date="1139400000">- Remove glibc-2.4-ppc-dl-procinfo-20060111.diff [#142839]</changelog>
<changelog author="kukuk@suse.de" date="1139227200">- Update to current CVS
- Fix alternate locale search path patch [#147685]</changelog>
<changelog author="kukuk@suse.de" date="1138881600">- Update to current CVS</changelog>
<changelog author="schwab@suse.de" date="1138622400">- Fix the fix.</changelog>
<changelog author="kukuk@suse.de" date="1138449600">- Fix seg.fault in __atfct_seterrno if called from futimesat()
- Apply patches for CPU-Tuned Environment on Power [#142839]</changelog>
<changelog author="kukuk@suse.de" date="1138363200">- Cleanup ld.so.conf</changelog>
<changelog author="kukuk@suse.de" date="1138276800">- Add alternate directory for translations [#144073]</changelog>
<changelog author="mls@suse.de" date="1138276800">- converted neededforbuild to BuildRequires</changelog>
<changelog author="kukuk@suse.de" date="1138017600">- Update to CVS
- Fix build_locales</changelog>
<changelog author="kukuk@suse.de" date="1137844800">- Update to CVS
- Fix inclusion of sys/poll.h with _GNU_SOURCE defined</changelog>
<changelog author="kukuk@suse.de" date="1137758400">- Update to CVS</changelog>
<changelog author="kukuk@suse.de" date="1137326400">- Update to CVS (fix long double configure check)</changelog>
<changelog author="schwab@suse.de" date="1137326400">- Readd &lt;fmtmsg.h&gt;, &lt;ucontext.h&gt;, &lt;sys/ucontext.h&gt;.</changelog>
<changelog author="schwab@suse.de" date="1137326400">- Readd &lt;alloca.h&gt;.</changelog>
<changelog author="kukuk@suse.de" date="1137240000">- Update to current CVS (long double support)</changelog>
<changelog author="aj@suse.de" date="1137153600">- Fix x86-64 w_exp to not use extra plt.</changelog>
<changelog author="kukuk@suse.de" date="1137067200">- Fix asm-s390/setup.h for userspace inclusion
- nsswitch.conf: Add nis to netgroup and automount entry
- Fix sys/procfs.h for ppc64</changelog>
<changelog author="kukuk@suse.de" date="1136808000">- Update to current CVS (fix for pthread.h with -std=c99)
- Define PAGE_SIZE on POWER
- Don't include linux/sched.h in asm-power/elf.h</changelog>
<changelog author="kukuk@suse.de" date="1136721600">- Fix linux/acct.h for userland inclusion</changelog>
<changelog author="kukuk@suse.de" date="1136721600">- Update to current CVS
- Remove CHILD_MAX from kernel-headers
- Copy subdirectories of asm-power, too.
- Remove da_DK@euro (does not exist)</changelog>
<changelog author="kukuk@suse.de" date="1136635200">- Fix ext2 kernel headers
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1136548800">- Update to kernel headers 2.6.15</changelog>
<changelog author="kukuk@suse.de" date="1136548800">- Update crypt_blowfish to version 1.0
- Update to current CVS
- Adjust nscd patches</changelog>
<changelog author="aj@suse.de" date="1136289600">- Update to current CVS to fix pthread.h on 64-bit systems for C++.</changelog>
<changelog author="aj@suse.de" date="1136289600">- Enable string patch again.
- Update to current CVS.</changelog>
<changelog author="kukuk@suse.de" date="1135166400">- Update to current CVS
- Fix ldconfig</changelog>
<changelog author="kukuk@suse.de" date="1134820800">- Remove /usr/lib/zoneinfo
- Add /etc/localtime to filelist
- Update to current CVS
- Fix glibc #1978: statvfs does not know about current filesystems
- Fix wrong error return code of time() on x86
- Remove nscd_nischeck
- Remove audit from nfb
- Remove LinuxThreads</changelog>
<changelog author="kukuk@suse.de" date="1134561600">- Update to current CVS
- Remove nscd_nischeck
- Remove audit from nfb</changelog>
<changelog author="kukuk@suse.de" date="1133784000">- Update to current CVS
- Disable SELinux</changelog>
<changelog author="kukuk@suse.de" date="1132833600">- Remove obsolete patches:
  - glibc-2.3.asprintf-error_handling.diff
  - glibc-2.3.90-missing-string_h.diff</changelog>
<changelog author="kukuk@suse.de" date="1132747200">- Update to current CVS
- Don't install in parallel</changelog>
<changelog author="kukuk@suse.de" date="1132315200">- Update to current CVS to fix compiling with new binutils</changelog>
<changelog author="kukuk@suse.de" date="1132142400">- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1131192000">- Update to current CVS
- Disable linuxthreads on POWER and Itanium
- Fix kernel-headers for userland inclusion</changelog>
<changelog author="kukuk@suse.de" date="1130932800">- Update to current CVS
- Update to kernel-headers 2.6.14</changelog>
<changelog author="kukuk@suse.de" date="1129636800">- Update to current CVS</changelog>
<changelog author="schwab@suse.de" date="1128168000">- Update libm ULPs.
- Fix limit in getcwd.</changelog>
<changelog author="kukuk@suse.de" date="1126785600">- Update to current CVS
- Update to final 2.6.13 kernel headers
- Adjust bindresvport.blacklist patch to check already ports &gt;= 512</changelog>
<changelog author="kukuk@suse.de" date="1125057600">- Update to current CVS
- init.d/nscd: Remove -S support (was removed from nscd)</changelog>
<changelog author="schwab@suse.de" date="1124452800">- Fix comment.</changelog>
<changelog author="matz@suse.de" date="1124452800">- Change .note.SuSE format [#105825].</changelog>
<changelog author="kukuk@suse.de" date="1124452800">- Update to current CVS
- Move all obsolete libraries into own subpackage and document
  them as obsolete</changelog>
<changelog author="schwab@suse.de" date="1123243200">- -mno-tls-direct-seg-refs is x86-only</changelog>
<changelog author="kukuk@suse.de" date="1122984000">- Update to 2.3.x CVS branch
- Compile with -mno-tls-direct-seg-refs</changelog>
<changelog author="kukuk@suse.de" date="1122638400">- Update to current CVS head</changelog>
<changelog author="schwab@suse.de" date="1122465600">- Update libm ULPs for ia64.
- Add linuxthreads stack guard support for ia64.</changelog>
<changelog author="kukuk@suse.de" date="1122120000">- Update to current CVS head (adds bits/wchar2.h)
- Move LinuxThreads version to obsolete/linuxthreads</changelog>
<changelog author="kukuk@suse.de" date="1121947200">- Update to current CVS head</changelog>
<changelog author="schwab@suse.de" date="1121428800">- Fix file list.</changelog>
<changelog author="aj@suse.de" date="1121428800">- Fix amd64 string routines and math routines.</changelog>
<changelog author="kukuk@suse.de" date="1121428800">- Use old LinuxThreads only for runtime and remove static version
  and headers
- Update to current CVS head
- Remove own texi2html</changelog>
<changelog author="kukuk@suse.de" date="1121083200">- Install generic stdio-lock.h header file</changelog>
<changelog author="kukuk@suse.de" date="1120910400">- Temporary disable AMD64 string optimization</changelog>
<changelog author="kukuk@suse.de" date="1120651200">- Build and install ja_JP.SHIFT_JISX0213 locale [Bug #84030]</changelog>
<changelog author="kukuk@suse.de" date="1120478400">- nss_compat: Preserve original return value [Bug #95033]
- Cleanup old Obsoletes/Requires</changelog>
<changelog author="kukuk@suse.de" date="1119873600">- Update to current gilbc CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1119528000">- Update to current glibc CVS snapshot
- Adjust nscd patch
- Enable SELinux/audit support for nscd
- Update .note.SuSE version</changelog>
<changelog author="kukuk@suse.de" date="1119268800">- Update to final 2.6.12 kernel headers
- Update to current glibc CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1118923200">- Update linux/audit.h header
- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1118664000">- Don't terminate strings twice in nis/netgroup code.
- netinet/if_tr.h: don't include kernel headers.</changelog>
<changelog author="kukuk@suse.de" date="1118232000">- Update to kernel-headers 2.6.12-rc6
- Fix build on s390 and s390x</changelog>
<changelog author="matz@suse.de" date="1118232000">- Don't strip .symtab from libpthread.so.0 (and other libs).
  Fixes debugging of threaded programs (#81253).</changelog>
<changelog author="kukuk@suse.de" date="1118059200">- Update to current CVS head
- Update to kernel-headers 2.6.12-rc5</changelog>
<changelog author="schwab@suse.de" date="1117108800">- No longer build loadlocale.c with -fno-unit-at-a-time.</changelog>
<changelog author="kukuk@suse.de" date="1116936000">- Update to current CVS head, obsoletes:
  - glibc-2.3.90-libm.diff
  - glibc-2.3.90-i386-sysdep.diff
  - warn.diff
  - dl-osinfo.diff
  Adjusted:
  - glibc-2.3.90-bindresvport.blacklist.diff</changelog>
<changelog author="schwab@suse.de" date="1116763200">- Fix missing include.</changelog>
<changelog author="schwab@suse.de" date="1116331200">- Fix warning.</changelog>
<changelog author="kukuk@suse.de" date="1114776000">- Update to latest CVS snapshost</changelog>
<changelog author="kukuk@suse.de" date="1114257600">- Fix all the archs using wrong FLAGS</changelog>
<changelog author="kukuk@suse.de" date="1114257600">- Remove -D_FORTIFY_SOURCE from RPM_OPT_FLAGS</changelog>
<changelog author="kukuk@suse.de" date="1114171200">- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1114171200">- Check if nice value does not conflict with test suite</changelog>
<changelog author="mls@suse.de" date="1113912000">- resolv: trigger re-read of /etc/resolv.conf for all threads if
  a change is detected
- nscd: support a negative timeout of zero, used by hosts cache</changelog>
<changelog author="meissner@suse.de" date="1113825600">- Enable fortify possibility even for GCC 4.0, we apply
  the necessary patch to the SUSE GCC 4.0.</changelog>
<changelog author="aj@suse.de" date="1113652800">- Apply amd64 string diff again.</changelog>
<changelog author="kukuk@suse.de" date="1113307200">- Update kernel-headers to 2.6.10
- Update to current CVS snapshot</changelog>
<changelog author="schwab@suse.de" date="1112788800">- Cleanup neededforbuild.</changelog>
<changelog author="aj@suse.de" date="1112702400">- Add gettext-devel to neededforbuild.</changelog>
<changelog author="aj@suse.de" date="1112702400">- Do not build on xen machines.
- Adjust libm ULPs for PowerPC.</changelog>
<changelog author="kukuk@suse.de" date="1112356800">- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1112097600">- Update to current CVS snapshot
- Fix compiler warnings on ix86</changelog>
<changelog author="kukuk@suse.de" date="1112011200">- Update to current CVS snapshot
- Disable Noversion Patch on i386 temporary</changelog>
<changelog author="ro@suse.de" date="1111147200">- check-build.sh: require 2.6.11 on x86,x86_64 for build</changelog>
<changelog author="mls@suse.de" date="1111060800">- nscd: enable hosts cache
- nscd: also watch /etc/resolv.conf
- nscd: check files every 3 seconds
- nscd: deal correctly with missing files</changelog>
<changelog author="kukuk@suse.de" date="1110888000">- Update to current CVS snapshot.</changelog>
<changelog author="schwab@suse.de" date="1108209600">- Remove const from __pthread_internal_tsd_address.</changelog>
<changelog author="schwab@suse.de" date="1108123200">- Update to current CVS.
- Link glibc_post_upgrade against new libc.
- Fix build error with gcc4.</changelog>
<changelog author="kukuk@suse.de" date="1107950400">- Update to current CVS
- Fix bindresvport blacklist handling.
- Increase buffer in tst-cancel17 to match new kernel buffer size
  [#50277]
- Enable LinuxThreads again
- Remove ia64-audit patch (is upstream)</changelog>
<changelog author="aj@suse.de" date="1107777600">- Add patch to allow compilation with gcc4.</changelog>
<changelog author="schwab@suse.de" date="1107172800">- Readd support for LD_AUDIT on ia64.</changelog>
<changelog author="kukuk@suse.de" date="1107172800">- Add memory clobber to string inline assemblies on s390 [#50284].</changelog>
<changelog author="kukuk@suse.de" date="1107172800">- Fix filelist on i686 if we build NPTL only version</changelog>
<changelog author="aj@suse.de" date="1107172800">- Generate new ULPs file for i386 needed by GCC 4.</changelog>
<changelog author="kukuk@suse.de" date="1107086400">- Include own copy of texi2html
- Add glibc_pst_upgrade program (based on version from FC3)
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1106827200">- Re-add patch for timezone/zic.c (got lost with last merge)</changelog>
<changelog author="kukuk@suse.de" date="1106740800">- Update timezone data to 2005c release (fixes zdump crash on
  64bit architectures)</changelog>
<changelog author="schwab@suse.de" date="1106395200">- Add basic (incomplete) support for LD_AUDIT on ia64.</changelog>
<changelog author="kukuk@suse.de" date="1106308800">- Enable patch for [Bug #49833]
- Allow to build NPTL only glibc
- Update to CVS from Jan 16, 2005, containing:
- Fix execlp argument in SunRPC code [glibc #681]
- Fix errno return values for futimes [glibc #633]
- Update FPU function on PPC/PPC64 [Bug #49764]</changelog>
<changelog author="aj@suse.de" date="1105963200">- Enable amd64 string patch again after fixing failing hunks.
- Handle missing cpuid better for amd64 string functions. [#49803]</changelog>
<changelog author="aj@suse.de" date="1105790400">- Fix amd64 string patch to use correct datatype.</changelog>
<changelog author="kukuk@suse.de" date="1105704000">- Fix memory corruption in getgrouplist function [Bug #49833]</changelog>
<changelog author="kukuk@suse.de" date="1105444800">- Enable all LinuxThreads tests again
- Finalize getconf -a patch (make it compatible with Solaris)
- Rewrite getconf manual page and mention new option
- Merge GB18030 patches into one.</changelog>
<changelog author="kukuk@suse.de" date="1104408000">- Merge kernel-headers.remove-SO_BSDCOMPAT.diff with
  kernel-headers.SuSE.diff
- Revert nscd paths on old SuSE Linux distributions</changelog>
<changelog author="kukuk@suse.de" date="1104321600">- Update to glibc 2.3.90 CVS branch
- Remove alarm-round.patch (merged upstream)</changelog>
<changelog author="kukuk@suse.de" date="1102593600">- Update to current CVS
- Move nscd persistent database files back to /var/run/nscd</changelog>
<changelog author="kukuk@suse.de" date="1102334400">- Update to current CVS
- Fix more kernel headers for userland inclusion</changelog>
<changelog author="ro@suse.de" date="1101470400">- kernel-headers.diff: define __force in compiler.h</changelog>
<changelog author="schwab@suse.de" date="1101384000">- Add Intel libm update.</changelog>
<changelog author="kukuk@suse.de" date="1101384000">- Update to current glibc CVS
- Update kernel headers to 2.6.9</changelog>
<changelog author="kukuk@suse.de" date="1100779200">- Update to current glibc CVS</changelog>
<changelog author="kukuk@suse.de" date="1100520000">- Update to current glibc CVS</changelog>
<changelog author="kukuk@suse.de" date="1099915200">- Blacklist port 921 (lwresd) for usage by bindresvport()
- Update to current glibc CVS
- Add /var/run/nscd/* files as ghost entries</changelog>
<changelog author="aj@suse.de" date="1098100800">- Don't use special fdim functions for x86-64 since those give
  wrong results for fdim (inf,inf).
- Fix ppc64 rebuild issue with ppc32 system [#47325].</changelog>
<changelog author="kukuk@suse.de" date="1097668800">- Fix symlink librt.so -&gt; tls/librt.so.1
- Backout last glob changes
- Disable nptl as default for linking</changelog>
<changelog author="kukuk@suse.de" date="1097582400">- Install kernel-headers after merging linuxthreads/NPTL headers</changelog>
<changelog author="kukuk@suse.de" date="1097582400">- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1097496000">- Make NPTL default for linking</changelog>
<changelog author="kukuk@suse.de" date="1096632000">- Update to current CVS snapshot
- Add workaround for linuxthreads/without-__threads bug
- Remove KDE/ldconfig workaround
- Set SuSE ABI note to 9.3</changelog>
<changelog author="kukuk@suse.de" date="1096200000">- Add lib/nptl/librt.so symlink to tls/librt.so.1
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1096113600">- Implement mq support for rtkaio and enable it again</changelog>
<changelog author="kukuk@suse.de" date="1096027200">- Add zh_SG.UTF-8 [Bug #46024]</changelog>
<changelog author="kukuk@suse.de" date="1095940800">- Sync sys/mount.h and linux/fs.h</changelog>
<changelog author="kukuk@suse.de" date="1095854400">- Make mdns support configurable in /etc/host.conf</changelog>
<changelog author="kukuk@suse.de" date="1095681600">- Fix invalidating of nscd caches and getaddrinfo()</changelog>
<changelog author="kukuk@suse.de" date="1095422400">- Update to current CVS (nscd and glob.h fixes)</changelog>
<changelog author="kukuk@suse.de" date="1095336000">- Fix getaddrinfo/nscd support</changelog>
<changelog author="kukuk@suse.de" date="1095249600">- Update to current CVS, remove merged patches</changelog>
<changelog author="kukuk@suse.de" date="1094990400">- Update to CVS: Fix nscd crash if one service is disabled
- glob.h: Add workaround for invalid prototypes
- nss_compat: Check that buffer is larger than 0 bytes</changelog>
<changelog author="kukuk@suse.de" date="1094817600">- Update to CVS: Fix cdefs.h for C++ usage</changelog>
<changelog author="kukuk@suse.de" date="1094817600">- Add lwres to hosts search order in nsswitch.conf
- Update to current CVS
- Use new nscd paths for socket/pid file
- Enable NPTL on i586
- Add --print-all option to getconf</changelog>
<changelog author="kukuk@suse.de" date="1094126400">- Fix NPTL header files on x86-64 for 32bit compilation
- Apply various fixes from CVS
- Remove pre-Install for -devel package (no longer necessary)</changelog>
<changelog author="kukuk@suse.de" date="1093435200">- Don't compile in eval.c</changelog>
<changelog author="kukuk@suse.de" date="1093262400">- Update to current CVS:
  - Use CVS version for last fix.
  - Add malloc sanity checks for double free.</changelog>
<changelog author="schwab@suse.de" date="1093003200">- Fix cancellable syscalls in librt w/ linuxthreads.</changelog>
<changelog author="kukuk@suse.de" date="1093003200">- Update to current CVS [#43993]</changelog>
<changelog author="schwab@suse.de" date="1092916800">- Better fix for asm-ia64/gcc_intrin.h.</changelog>
<changelog author="kukuk@suse.de" date="1092830400">- Update to current CVS
- Workaround linux/ixjuser.h problem not including compiler.h
- Workaround linux/capi.h problem not including compiler.h</changelog>
<changelog author="schwab@suse.de" date="1092744000">- Fix asm-ia64/gcc_intrin.h.</changelog>
<changelog author="kukuk@suse.de" date="1092744000">- Workaround broken linux/crc-ccitt.h for usage from glibc [#43884]</changelog>
<changelog author="kukuk@suse.de" date="1092657600">- Update to current CVS version and update to
  kernel-headers 2.6.8.1 to fix NPTL deadlock problems
- Disable linuxthreads/tst-clock1, does not work on i586 and lower</changelog>
<changelog author="kukuk@suse.de" date="1092398400">- Update to current CVS version
- Cleanup/adjust all patches</changelog>
<changelog author="kukuk@suse.de" date="1087473600">- Fix sched_setaffinity return/errno code in error case [#42124]</changelog>
<changelog author="meissner@suse.de" date="1087387200">- Updated altivec set/get/swapcontext patch to fix
  more problems on altivec capable machines [#42039].
- glibc is also able to build on -pmac64 kernels.</changelog>
<changelog author="kukuk@suse.de" date="1087214400">- Add fixes from CVS:
  - sysconf return value fixes
  - nscd host caching deadlock
  - backtrace for s390/s390x/ia64 static linked binaries</changelog>
<changelog author="kukuk@suse.de" date="1087214400">- Increase listen backlog in RPC code [#41955]</changelog>
<changelog author="meissner@suse.de" date="1086782400">- Fixed typos in powerpc* *context functions to not destroy the r19
  register and save the v19 register correctly. [#41790]</changelog>
<changelog author="aj@suse.de" date="1086436800">- Fix makecontext with more than 6 arguments on x86-64 [#40546].</changelog>
<changelog author="kukuk@suse.de" date="1085400000">- Update to kernel-headers 2.6.6
- Update to current glibc CVS
- Disable rtkaio temporary</changelog>
<changelog author="kukuk@suse.de" date="1085313600">- Fix pthread_cond_wait on not ix86 and x86-64 architectures</changelog>
<changelog author="kukuk@suse.de" date="1085054400">- Add PPC64 kernel header file fixes [#40831,#40870]</changelog>
<changelog author="kukuk@suse.de" date="1084968000">- Add additional NPTL fixes from CVS</changelog>
<changelog author="schwab@suse.de" date="1084881600">- Fix mapping of DSOs with holes.</changelog>
<changelog author="schwab@suse.de" date="1084536000">- Fix rounding in alarm [#40552].</changelog>
<changelog author="schwab@suse.de" date="1084363200">- Fix uninitialized array in regexp compiler [#40009].</changelog>
<changelog author="kukuk@suse.de" date="1084276800">- Apply lot of fixes from current CVS
- Fix alignment of stack for makecontext on x86-64 [Bug #39413]
- Make XTABS identical to TABDLY on PPC</changelog>
<changelog author="kukuk@suse.de" date="1083758400">- Add some header fixes to match POSIX</changelog>
<changelog author="meissner@suse.de" date="1083672000">- Fix INLINE_SYSCALL on ppc and ppc64 (see #38399)</changelog>
<changelog author="kukuk@suse.de" date="1083585600">- Port --mlock option for ld.so from UL1 [Bug #39569]</changelog>
<changelog author="kukuk@suse.de" date="1082462400">- Add execstack fix for s390</changelog>
<changelog author="kukuk@suse.de" date="1082376000">- Update to current CVS version (fix problems with new binutils
  and gcc)</changelog>
<changelog author="kukuk@suse.de" date="1082376000">- Add pthread_getattr_np and syslog fixes from CVS
- Update gb18030 and big5hkscs gconv modules [Bug #39080]</changelog>
<changelog author="schwab@suse.de" date="1082203200">- Pacify autobuild.</changelog>
<changelog author="kukuk@suse.de" date="1082030400">- Add /etc/ld.so.conf.d/*.conf to /etc/ld.so.conf
- Disable FUTEX_REQUEUE support in NPTL library [Bug #38882]</changelog>
<changelog author="schwab@suse.de" date="1081944000">- Remove /usr/i386-linux from ld.so.conf,</changelog>
<changelog author="kukuk@suse.de" date="1081944000">- Fix linux/compiler.h for glibc inclusion
- Really fix ffsl on s390x</changelog>
<changelog author="schwab@suse.de" date="1081512000">- Fix syntax error in memcmp.</changelog>
<changelog author="kukuk@suse.de" date="1081512000">- Update from CVS: linuxthread debug fixes
- Fix INLINE_SYSCALL on x86-64 and ia64 (fixes #38399)
- Fix ffsl weak alias on s390x
- Update to 2.6.5 kernel headers</changelog>
<changelog author="meissner@suse.de" date="1081339200">- forward umount to umount2 on ppc64 because umount syscall
  does not exist</changelog>
<changelog author="kukuk@suse.de" date="1081166400">- Sync with current CVS (which is nearly identical with most of
  our latest patches)</changelog>
<changelog author="kukuk@suse.de" date="1080907200">- Make fstatvfs64 working on 32bit architectures
- Add fwrite LFS fix from aj
- Add powerpc fixes from CVS
- Fix wrong errno code for shm_unlink [Bug #38013]</changelog>
<changelog author="kukuk@suse.de" date="1080734400">- Add three fixes from CVS:
  - Call __nptl_deallocate_tsd for main thread, too
  - setgroups: optimizations for huge number of groups
  - initgroups: Limit the initial allocation to 64 entries</changelog>
<changelog author="kukuk@suse.de" date="1080648000">- Add IUTF8 to bits/termios.h [Bug #34725]
- *affinitiy.c: Prepend GLIBC_ to version names</changelog>
<changelog author="kukuk@suse.de" date="1080388800">- Fix wrong return value of getXXbyYY_r in case key was not
  found [Bug #37181]
- Fix typo in dl-open
- Don't set errno in NSS NIS module if group was not found</changelog>
<changelog author="aj@suse.de" date="1080302400">- Add pow10/pow10f aliases for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1080216000">- Update to latest CVS snapshot</changelog>
<changelog author="aj@suse.de" date="1079784000">- Fix further problems with sched_[sg]etaffinity calls.</changelog>
<changelog author="aj@suse.de" date="1079697600">- Fix sched_setaffinity compile problem.</changelog>
<changelog author="kukuk@suse.de" date="1079697600">- Remove conflict with special aaa_base version (rpm will handle
  this with file conflict)</changelog>
<changelog author="kukuk@suse.de" date="1079697600">- Add SuSE abi note
- Add madvise patch
- Update to current CVS</changelog>
<changelog author="kukuk@suse.de" date="1079524800">- Use official NPTL version fix
- Add LD_DEBUG=statistic for x86-64
- Fix two JB_SIZE redefinitions on PPC
- Add two fixes for execstack</changelog>
<changelog author="kukuk@suse.de" date="1079352000">- Require kernel 2.6.4 for glibc/NPTL
- Remove siginfo_t/si_band patch (needs to be fixed in kernel)
- Update linuxthreads_db and nptl_db
- Add libidn fixes from CVS</changelog>
<changelog author="kukuk@suse.de" date="1079179200">- Adjust filelist (remove libcidn.a and libcidn_p.a)</changelog>
<changelog author="kukuk@suse.de" date="1079179200">- Update to current CVS (merge of patches)
- Fix siginfo_t/si_band [Bug #34330]</changelog>
<changelog author="mls@suse.de" date="1079006400">- Add mdns support to resolver library</changelog>
<changelog author="kukuk@suse.de" date="1079006400">- Update kernel headers to 2.6.4
- Update to current glibc CVS</changelog>
<changelog author="bg@suse.de" date="1078920000">- Update hppa patches.</changelog>
<changelog author="kukuk@suse.de" date="1078747200">- Fix vDSO on IA64</changelog>
<changelog author="kukuk@suse.de" date="1078747200">- Update from glibc CVS:
  - Add libidn
  - Lot of dynamic loader changes</changelog>
<changelog author="kukuk@suse.de" date="1078401600">- Update from glibc CVS:
  - Fix posix_fadvise vs. posix_fadvise64</changelog>
<changelog author="kukuk@suse.de" date="1078228800">- Fix PPC kernel header files
- Update from glibc CVS
  - NPTL fixes
  - nscd fixes</changelog>
<changelog author="schwab@suse.de" date="1078228800">- Fix ppc32 to always use stat64 syscall.</changelog>
<changelog author="kukuk@suse.de" date="1077969600">- Update from glibc CVS:
  - Fix compiler warnings
  - NPTL: Don't use CLONE_STOPPED
  - Revert vDSO changes</changelog>
<changelog author="kukuk@suse.de" date="1077883200">- Update from glibc CVS:
  - Real NGROUP_MAX fix
  - Lot of NPTL fixes
  - clock_settime fix
- Add no_NO back (required by OpenI18N spec and [Bug #34745])</changelog>
<changelog author="kukuk@suse.de" date="1077796800">- Workaround broken NGROUP_MAX function</changelog>
<changelog author="kukuk@suse.de" date="1077796800">- Add insserv PreRequires for nscd
- Update from CVS: NPTL and getaddrinfo memory leak fixes,
  Get NGROUP_MAX from /proc filesystem</changelog>
<changelog author="kukuk@suse.de" date="1077364800">- Update from CVS: IA64 relo fix, lot of PPC fixes
- Fix linux/mod_devicetable.h for userland inclusion
- Enable NPTL on Alpha</changelog>
<changelog author="schwab@suse.de" date="1077278400">- Fix pthread_barrier_wait.</changelog>
<changelog author="kukuk@suse.de" date="1077192000">- Update from CVS: More NPTL fixes
- nscd.init: Cleanups</changelog>
<changelog author="kukuk@suse.de" date="1077105600">- Kernel Headers: Fix asm-ppc/unaliged.h, asm-ppc/types.h and
  asm-ppc/bitops.h for userland inclusion.</changelog>
<changelog author="bg@suse.de" date="1077105600">- Update hppa patches for current glibc
- Add workaround for ICE in hppa</changelog>
<changelog author="kukuk@suse.de" date="1077019200">- Update from CVS:
  - PPC nptl compatiblity fix
  - NSCD patches merged
  - ld.so.preload: Igreno missing files
  - getaddrinfo: Fix problem with IPv6 addresses</changelog>
<changelog author="aj@suse.de" date="1077019200">- Fix string optimizations init code on AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1076760000">- Update from CVS (for NPTL fixes and new PPC longjmp)
- Fix nscd deadlock with kernel 2.6 [Bug #34507]</changelog>
<changelog author="aj@suse.de" date="1076673600">- Add more string/memory optimizations for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1076587200">- Fix regex bug with invalid UTF-8 strings</changelog>
<changelog author="aj@suse.de" date="1076587200">- Add more string optimizations for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1076500800">- Update to current CVS snapshot
- Fix _IOC_TYPECHECK on s390/s390x/parisc
- Compile rtkaio only with NPTL
- Remove glibcbug (was dropped since glibc uses bugzilla now)
- Disable parallel build on s390x</changelog>
<changelog author="schwab@suse.de" date="1076414400">- Work around invalid use of kernel headers in some packages.</changelog>
<changelog author="kukuk@suse.de" date="1076068800">- Add kernel stat fix for PPC
- Add fix for off-by-one error in regex code</changelog>
<changelog author="kukuk@suse.de" date="1075982400">- Update kernel header files to 2.6.2</changelog>
<changelog author="bg@suse.de" date="1075809600">- Update hppa patch</changelog>
<changelog author="kukuk@suse.de" date="1075809600">- Fix ypclnt speedup patch
- Update to current CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1075118400">- Update to current CVS snapshot</changelog>
<changelog author="aj@suse.de" date="1074686400">- Do not run in parallel on s390.</changelog>
<changelog author="ro@suse.de" date="1074513600">- really fix linux/percpu.h to compile in userland</changelog>
<changelog author="kukuk@suse.de" date="1074254400">- Update version.h to 2.6.1
- Fix linux/percpu.h to compile in userland
- Update to current CVS snapshot
- Revert nscd path changes</changelog>
<changelog author="kukuk@suse.de" date="1074081600">- Update to Kernel Headers 2.6.1
- Update to current CVS snapshot
- Don't ignore make check on IA64 any longer</changelog>
<changelog author="schwab@suse.de" date="1073736000">- Locale no_NO has been renamed to nb_NO.</changelog>
<changelog author="kukuk@suse.de" date="1073649600">- Temporary ignore make check on IA64 and PPC
  (known kernel/compiler bugs)</changelog>
<changelog author="stepan@suse.de" date="1073649600">- fix v4l2 headers</changelog>
<changelog author="kukuk@suse.de" date="1073476800">- Update to glibc CVS from 20040107
- Remove manual pages which are now part of man-pages</changelog>
<changelog author="kukuk@suse.de" date="1071748800">- Update to glibc CVS from 20031218
- Update ot final 2.6.0 kernel headers
- Fix syntax error in spec file
- Update HPPA patch</changelog>
<changelog author="kukuk@suse.de" date="1071489600">- Update to glibc CVS from 20031215</changelog>
<changelog author="kukuk@suse.de" date="1071230400">- Update to glibc CVS from 20031212
- disable rtkaio (does not work with kernel 2.6 yet)</changelog>
<changelog author="kukuk@suse.de" date="1070625600">- Update to glibc 2.3.3 CVS
- Make an extra sub package for nscd</changelog>
<changelog author="kukuk@suse.de" date="1069934400">- Update to glibc CVS from 20031127
- Add nsswitch.conf (moved from aaa_base)
- Add ld.so.conf (moved from aaa_base) [Bug #33277]
- Fix ceil on AMD64</changelog>
<changelog author="kukuk@suse.de" date="1069416000">- Update to glibc CVS from 20031121
- Obsolete epoll (glibc-devel contains now this header files)</changelog>
<changelog author="kukuk@suse.de" date="1069243200">- Add patch so that ld.so supports linuxthreads and nptl
- PPC64 requires kernel 2.4.21
- Update to glibc CVS from 20031119</changelog>
<changelog author="bg@suse.de" date="1068811200">- Add hppa patches for current glibc.</changelog>
<changelog author="kukuk@suse.de" date="1068811200">- Update to glibc CVS from 20031114
- Remove PPC64 symbol version patch</changelog>
<changelog author="schwab@suse.de" date="1068724800">- Fix last change covering libNoVersion.</changelog>
<changelog author="schwab@suse.de" date="1068465600">- Specfile cleanup.</changelog>
<changelog author="kukuk@suse.de" date="1068120000">- Update to glibc CVS from 20031106</changelog>
<changelog author="uli@suse.de" date="1068033600">- added a number of ARM fixes (glibc-2.3.2-armformat.patch,
  glibc-armisa.patch, glibc-sjlj.patch)</changelog>
<changelog author="kukuk@suse.de" date="1067256000">- Update to glibc CVS from 20031027
- kernel headers: update to 2.6.0-test9
- nptl: Use -fno-unit-at-a-time on AMD64, too</changelog>
<changelog author="kukuk@suse.de" date="1066910400">- Update to current CVS version</changelog>
<changelog author="kukuk@suse.de" date="1066824000">- nptl: Fix prototype in configure script
- nptl: Use -fno-unit-at-a-time
- locale: Add nb_NO</changelog>
<changelog author="kukuk@suse.de" date="1066392000">- Increase timeout for make check on overloaded architectures</changelog>
<changelog author="kukuk@suse.de" date="1066305600">- Fix building as normal user</changelog>
<changelog author="kukuk@suse.de" date="1066219200">- Fix putpwent/putgrent
- Make build as normal user</changelog>
<changelog author="kukuk@suse.de" date="1066132800">- Update to glibc CVS from 20031014</changelog>
<changelog author="aj@suse.de" date="1066132800">- Fix w_acosf for AMD64.</changelog>
<changelog author="kukuk@suse.de" date="1066132800">- Fix asm-sparc/kbio.h to compile kbdrate/X11</changelog>
<changelog author="kukuk@suse.de" date="1066046400">- Update to kernel header files from 2.6.0-test7</changelog>
<changelog author="schwab@suse.de" date="1065787200">- Fix misnamed syscalls.</changelog>
<changelog author="kukuk@suse.de" date="1065528000">- Update to glibc CVS from 20031007</changelog>
<changelog author="kukuk@suse.de" date="1065182400">- Update to glibc CVS from 20031003
- Fix kernel ioctl header files for PPC/PPC64
- Removed dl-reloc.c fix, merged upstream</changelog>
<changelog author="kukuk@suse.de" date="1065009600">- Update to glibc cvs from 20031001
- Remove sysmacros.h fix, merged upstream
- Add dl-reloc.c fix for compiler warnings</changelog>
<changelog author="kukuk@suse.de" date="1064836800">- Update kernel-headers to 2.6.0-test6
- Fix sysmacros.h to compile with -ansi</changelog>
<changelog author="kukuk@suse.de" date="1064664000">- Update to glibc CVS from 20030927
- Remove SO_BSDCOMPAT (obsoleted by kernel)
- Make _IOC_TYPECHECK useable for userland programs</changelog>
<changelog author="kukuk@suse.de" date="1064577600">- Remove obsolete patches
- Update to crypt_blowfish 0.4.5</changelog>
<changelog author="kukuk@suse.de" date="1064577600">- Update to glibc CVS from 20030926
- Update to nptl 0.60</changelog>
<changelog author="kukuk@suse.de" date="1064059200">- Update to glibc CVS from 20030920
- Update to nptl 0.59</changelog>
<changelog author="kukuk@suse.de" date="1063800000">- Disable TLS for i586 glibc [Bug #31034]</changelog>
<changelog author="kukuk@suse.de" date="1063713600">- Remove db1.85</changelog>
<changelog author="kukuk@suse.de" date="1063627200">- Update to glibc CVS from 20030915</changelog>
<changelog author="kukuk@suse.de" date="1063627200">- Update to kernel 2.6.0-test5 header files</changelog>
<changelog author="kukuk@suse.de" date="1063454400">- Add librtkaio, a librt using kernel aio</changelog>
<changelog author="kukuk@suse.de" date="1063281600">- Update to current CVS
- Remove patches which are merged in CVS
- Update to nptl-0.58
- Remove _POSIX_VERSION hack</changelog>
<changelog author="kukuk@suse.de" date="1063281600">- version.h: Fix comment how to compile kernel modules</changelog>
<changelog author="aj@suse.de" date="1063195200">- Install en_US.ISO-8859-15 under this name [#30373].</changelog>
<changelog author="aj@suse.de" date="1063108800">- Fix last patch.</changelog>
<changelog author="aj@suse.de" date="1063022400">- Fix setting up of user signal handler in linuxthreads on x86_64.</changelog>
<changelog author="kukuk@suse.de" date="1062763200">- Add dl-tls.c to fix out of memory with static TLS errors</changelog>
<changelog author="kukuk@suse.de" date="1062590400">- Update glibc-linuxthreads
- Set _POSIX_VERSION back to 199209</changelog>
<changelog author="kukuk@suse.de" date="1062417600">- Fix typo in nss_compat patch</changelog>
<changelog author="kukuk@suse.de" date="1062417600">- Add opendir fix for usage with NPTL
- Fix getspnam/getspent in nss_compat [Bug #29689]
- Set _POSIX2_VERSION back to 199209</changelog>
<changelog author="kukuk@suse.de" date="1061985600">- Update to current CVS version</changelog>
<changelog author="kukuk@suse.de" date="1061812800">- Update to current CVS version</changelog>
<changelog author="aj@suse.de" date="1061208000">- increase stack size for linuxthreads/set-context.</changelog>
<changelog author="aj@suse.de" date="1061208000">- Fix mathinline.h for i386 to compile under C++ without warnings.</changelog>
<changelog author="ro@suse.de" date="1061121600">- kernel-headers.dif: don't include device.h from videodev.h</changelog>
<changelog author="kukuk@suse.de" date="1060948800">- Update to current cvs (fixes assert usage in C++ source code)</changelog>
<changelog author="kukuk@suse.de" date="1060862400">- Initialize fp-&gt;_mode for glibc 2.0 compatibility [Bug #28386]
- On i686, include glibc with and without floating stack enabled
- Update to current cvs
- Update to nptl 0.56</changelog>
<changelog author="kukuk@suse.de" date="1059652800">- Reenable new quota.h</changelog>
<changelog author="kukuk@suse.de" date="1059566400">- Update to current cvs
- Update kernel headers to 2.6.0-test2
- Disable sys/quota.h update
- Enable TLS on AMD64 again</changelog>
<changelog author="kukuk@suse.de" date="1059393600">- Update to current cvs
- Disable TLS on AMD64 temporary
- Update sys/quota.h to match new kernel implementation</changelog>
<changelog author="kukuk@suse.de" date="1059134400">- Update to current cvs
- Update kernel headers to 2.6.0-test1
- Update to nptl 0.55
- Change minimal symbol version on PPC64 back to 2.2.5</changelog>
<changelog author="meissner@suse.de" date="1058961600">- Fixed systemcall clobber lists for asm-ppc/unistd.h (by just
  merging over the asm-ppc64 things).</changelog>
<changelog author="aj@suse.de" date="1058961600">- Handle in ldconfig konqueror.so and other similar KDE hacks that fail without
  rpath.
- Fix bugs exposed by unit-at-a-time option.</changelog>
<changelog author="aj@suse.de" date="1058529600">- Fix compilation with unit-at-a-time enabled compiler.
- Enlarge stack for tst-setcontext test.</changelog>
<changelog author="kukuk@suse.de" date="1056974400">- Update to current CVS (includes if_arp.h and nss_compat changes)
- Update to nptl 0.50
- Kernel header fixes for userland inclusion</changelog>
<changelog author="kukuk@suse.de" date="1056542400">- Update to current CVS
- Add target host and CVS checkout to glibc version printout
- Adjust fnmatch fix
- Update kernel headers to 2.5.73</changelog>
<changelog author="kukuk@suse.de" date="1056456000">- Fix typos in syscalls.list on Alpha</changelog>
<changelog author="kukuk@suse.de" date="1056369600">- fix typo in linuxthreads on SPARC
- Update to current CVS
- Update to nptl 0.48</changelog>
<changelog author="kukuk@suse.de" date="1056024000">- Disable nss_compat patch again</changelog>
<changelog author="kukuk@suse.de" date="1055937600">- Fix reading of locale.alias file
- Update to current CVS snapshot
- Update to nptl 0.47
- Some kernel header file fixes for PPC64/IA64
- Update nss_compat patch</changelog>
<changelog author="kukuk@suse.de" date="1055419200">- Update to current CVS snapshot
- Finish patch for printing linker warning</changelog>
<changelog author="kukuk@suse.de" date="1055332800">- Update to nptl 0.45
- Update to current CVS snapshot
- Add patch to print linker warning, if a static binary calls
  functions using NSS</changelog>
<changelog author="kukuk@suse.de" date="1055246400">- Use %find_lang macro and cleanup glibc-locale filelist</changelog>
<changelog author="kukuk@suse.de" date="1054814400">- Complete mathinline.h fixes</changelog>
<changelog author="kukuk@suse.de" date="1054814400">- linux/compiler.h: Define all inline variants to __inline__</changelog>
<changelog author="kukuk@suse.de" date="1054728000">- Update to current glibc CVS snapshot
- Update to nptl 0.43
- More kernel header fixes
- Make --no-archive default for localedef</changelog>
<changelog author="kukuk@suse.de" date="1054036800">- Update to current glibc CVS snapshot
- Update to nptl 0.40
- Disable nss_compat patch
- Update to kernel headers from 2.5.70</changelog>
<changelog author="kukuk@suse.de" date="1053691200">- Update to current glibc CVS snapshot
- Add patches to make nss_compat work with every service</changelog>
<changelog author="kukuk@suse.de" date="1053345600">- Update to current glibc CVS snapshot
- Add patch for better binary compatibility (errno, h_errno)</changelog>
<changelog author="kukuk@suse.de" date="1053086400">- Update to current glibc CVS snapshot
- Update to nptl 0.39
- Add URL tag
- asm-i386/byteorder.h: fix asm vs. __asm__</changelog>
<changelog author="schwab@suse.de" date="1052913600">- Fix missing syscall numbers on ia64.</changelog>
<changelog author="kukuk@suse.de" date="1052913600">- More kernel headers fixes for i386, ia64, ppc and s390</changelog>
<changelog author="kukuk@suse.de" date="1052740800">- Update to current glibc CVS snapshot
- Fix lot of more kernel headers
- Adjust netinet/igmp.h patch
- Copy linux/version.h in place before compiling glibc</changelog>
<changelog author="kukuk@suse.de" date="1052481600">- Fix bits/stdio.h
- Fix lot of kernel headers to work in userspace
- Fix netinet/igmp.h
- Enable TLS on PPC</changelog>
<changelog author="kukuk@suse.de" date="1052308800">- Update CVS snapshot
- Enable TLS on IA64
- Update to nptl 0.37
- Update kernel-headers to 2.5.69</changelog>
<changelog author="ro@suse.de" date="1051185600">- fix install_info --delete call and move from preun to postun</changelog>
<changelog author="aj@suse.de" date="1050062400">- Do not build locales in parallel.</changelog>
<changelog author="kukuk@suse.de" date="1049803200">- Disable TLS for PPC</changelog>
<changelog author="kukuk@suse.de" date="1049716800">- Update CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1049544000">- Disable TLS for ia64
- Update to nptl 0.34
- Update to CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1049457600">- Remove libNoVersion from filelist on alpha
- Add nptl docu</changelog>
<changelog author="kukuk@suse.de" date="1049457600">- Update to nptl 0.33
- Run ldconfig after installation
- Update to CVS snapshot</changelog>
<changelog author="kukuk@suse.de" date="1048939200">- Update to CVS snapshot
- Add USAGI patches for kernel-headers
- Add nptl on i686
- Enable --with-tls
- Implement NI_NUMSERICSCOPE for getnameinfo
- Implement AI_V4MAPPED/AI_ALL for getaddrinfo
- Implement AI_ADDRCONFIG for getaddrinfo
- Add USAGI patch for kernel headers</changelog>
<changelog author="schwab@suse.de" date="1048507200">- Sanitize &lt;asm-ia64/pal.h&gt;.</changelog>
<changelog author="aj@suse.de" date="1047902400">- Fix tst-aio7 testcase and enable it again.
- Enable %fs for x86-64.
- Install en_US.ISO-8859-15 for libstdc++.
- Fix bits/syscalls.h for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1047556800">- Revert tcgetattr change [Bug #25173/#25174]</changelog>
<changelog author="aj@suse.de" date="1046779200">- Fix &lt;tgmath.h&gt; lround/lrint functions.</changelog>
<changelog author="aj@suse.de" date="1046520000">- Update to 2.3.2 release.</changelog>
<changelog author="kukuk@suse.de" date="1046260800">- Update to current cvs snapshot (fixes OOo and mysql problems)</changelog>
<changelog author="kukuk@suse.de" date="1046088000">- Disable aio7 test on s390(x), too.</changelog>
<changelog author="kukuk@suse.de" date="1046088000">- Update to current cvs snapshot (post 2.3.2-pre1)
- Remove glibc-2.3-ppc32-textrel.patch, is included in CVS
- Remove libc23-ppc64-cvshead20021210.patch</changelog>
<changelog author="kukuk@suse.de" date="1045742400">- Update to current cvs snapshot
- Remove glibc-2.3-ppc64-vfork-20030214.patch, seems to be
  included already.</changelog>
<changelog author="olh@suse.de" date="1045656000">- add glibc-2.3-ppc32-textrel.patch
    glibc-2.3-ppc64-vfork-20030214.patch</changelog>
<changelog author="kukuk@suse.de" date="1045224000">- Extend getent to print all IP addresses of one host</changelog>
<changelog author="kukuk@suse.de" date="1045137600">- Update to current snapshot</changelog>
<changelog author="kukuk@suse.de" date="1045051200">- Update to current snapshot (contains official fix for #23513)</changelog>
<changelog author="kukuk@suse.de" date="1044964800">- Update to current snapshot
- Fix corruption of internal data in gethostbyname2 [Bug #23513]</changelog>
<changelog author="aj@suse.de" date="1044792000">- Fix cancellation of system calls on x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1044705600">- Fix wrong logic in dynamic resolv.conf patch</changelog>
<changelog author="kukuk@suse.de" date="1044619200">- Fix access of _res symbol in multithreaded programs
- Add &quot;dynamic resolv.conf&quot; patch to libnss_dns, too.
- Remove obsolete db2 manual pages
- Update to current snapshot (fixes [Bug #23363])</changelog>
<changelog author="kukuk@suse.de" date="1044532800">- Update to current snapshot
- Use install-info for info pages</changelog>
<changelog author="schwab@suse.de" date="1044360000">- Fix regexp parsing.</changelog>
<changelog author="meissner@suse.de" date="1044273600">- Merged a unistd.h gcc3.3 compliance patch from Franz Sirl for
  ppc and ppc64 kernel headers.</changelog>
<changelog author="schwab@suse.de" date="1044014400">- Fix building on s390[x].</changelog>
<changelog author="kukuk@suse.de" date="1044014400">- Update to current glibc cvs</changelog>
<changelog author="aj@suse.de" date="1043928000">- Fix one build problem on sparc.
- Fix asm-x86_64/mtrr.h.</changelog>
<changelog author="kukuk@suse.de" date="1043841600">- Update to current glibc cvs
- Fix libm-ulps for x86-64 and ia64</changelog>
<changelog author="schwab@suse.de" date="1043323200">- Fix use of DT_FINI_ARRAY.
- Temporarily disable tst-aio7 test on ia64.</changelog>
<changelog author="schwab@suse.de" date="1042545600">- Fix ia64 for non-tls build.</changelog>
<changelog author="aj@suse.de" date="1042545600">- Package libpthread_nonshared.a.</changelog>
<changelog author="kukuk@suse.de" date="1042459200">- Add fixed version of x86-64-linuxthreads-disable-fs.diff
- Readd parts of libm-x86-64.diff
- Update to current cvs snapshot
- Add fix for errno compatibility
- Add s390(x) vfork fixes</changelog>
<changelog author="kukuk@suse.de" date="1042372800">- Update to current cvs snapshot</changelog>
<changelog author="bg@suse.de" date="1041595200">- removed obsolete patch for hppa</changelog>
<changelog author="kukuk@suse.de" date="1040385600">- Update to current cvs snapshot
- Obsoletes glibc-2.3-setjmp-ppc64.diff
- Obsoletes build-alpha.diff
- Obsoletes libm-x86-64.diff
- Disable activate-spinlocks.diff temporary
- Disable x86-64-linuxthreads-disable-fs.diff (breaks compilation)</changelog>
<changelog author="olh@suse.de" date="1040126400">- remove glibc-2.2.5-ppc64-bits-socket_h.diff
  add glibc-2.3-setjmp-ppc64.diff
  add libc23-ppc64-cvshead20021210.patch
  dont run configure in subshell, it can fail and rpm cant catch it</changelog>
<changelog author="schwab@suse.de" date="1039780800">- Add more ia64 syscalls.</changelog>
<changelog author="olh@suse.de" date="1039176000">- build also the locals parallel
  do not fail with parallel calculation on lowmem systems</changelog>
<changelog author="aj@suse.de" date="1038916800">- Build parallel on x86-64.
- Activate fast spinlocks in malloc for x86 and x86-64.
- Integrate new math library from AMD for x86-64.</changelog>
<changelog author="bg@suse.de" date="1038571200">- Fix build on hppa.</changelog>
<changelog author="aj@suse.de" date="1038484800">- Fix build on alpha.</changelog>
<changelog author="aj@suse.de" date="1038484800">- Update to CVS version from 2002-11-28.
- Do not use %fs for threads for now on x86-64.
- Fix fnmatch bug with multibyte strings.</changelog>
<changelog author="bg@suse.de" date="1037102400">- Updated hppa patches</changelog>
<changelog author="kukuk@suse.de" date="1036670400">- getaddrinfo(): get host information for AF_INET and AF_INET6 only
  from the same service [Bug #21237]</changelog>
<changelog author="bg@suse.de" date="1036670400">- Fix build of linuxthreads for hppa</changelog>
<changelog author="bg@suse.de" date="1036497600">- Use current kernel-headers for parisc
- Add support for hppa</changelog>
<changelog author="kukuk@suse.de" date="1036497600">- Update to current CVS snapshot</changelog>
<changelog author="schwab@suse.de" date="1035288000">- Fix ia64 syscall numbers.</changelog>
<changelog author="schwab@suse.de" date="1035201600">- Fix alignment in locale-archive.</changelog>
<changelog author="kukuk@suse.de" date="1035201600">- Update to glibc 2.3.1 cvs 20021021
- Remove nss_dns6 patch</changelog>
<changelog author="kukuk@suse.de" date="1034683200">- Update to glibc 2.3.1 cvs 20021015</changelog>
<changelog author="kukuk@suse.de" date="1033560000">- Update to glibc 2.3 cvs 20021002
- Update crypt_blowfish to 0.4.4 (manual page fix, hppa fix)</changelog>
<changelog author="mls@suse.de" date="1032955200">- build with -finline-limit=2000 on mips/armv4l</changelog>
<changelog author="schwab@suse.de" date="1032264000">- Add new ia64 syscall numbers.</changelog>
<changelog author="meissner@suse.de" date="1032177600">- Added AIO syscall numbers for ppc/ppc64, so libaio does not need them.
- Aligned powerpc bits/sem.h to be the same as the other 64bit
  archs, keeping the 32bit layout.
- Added the faster ppc32 memset.S from glibc HEAD on request of IBM.</changelog>
<changelog author="meissner@suse.de" date="1031832000">- ppc/ppc64: added more biarch things to the SystemV IPC headers
  which are needed to get 64bit ipc / IPC_STAT to work.</changelog>
<changelog author="bk@suse.de" date="1031572800">- s390x-biarch: use correct wordsize.h(move to main 32/64 directory)
- s390x: requires 64-bit kernel</changelog>
<changelog author="kukuk@suse.de" date="1031572800">- Increase minimum value of MAXPACKET in libnss_dns, too</changelog>
<changelog author="uli@suse.de" date="1031572800">- all architectures are created equal, but some are more equal
  than others; increased DB_FILE_ID_LEN in DB2 to 24 on x86-64,
  ia64, s390x and ppc64 to fit 64 bit __ino_t type</changelog>
<changelog author="mls@suse.de" date="1031313600">- fix squeeze bug in db-1.85: set dirty flag after page modification</changelog>
<changelog author="kukuk@suse.de" date="1031313600">- Increase minimum value of MAXPACKET</changelog>
<changelog author="kukuk@suse.de" date="1030968000">- Fix asm header files for sparc/sparc64</changelog>
<changelog author="aj@suse.de" date="1030708800">- Revert linuxthreads for x86-64 for now.</changelog>
<changelog author="aj@suse.de" date="1030536000">- Add optimized math routines for x86-64.</changelog>
<changelog author="olh@suse.de" date="1030449600">- BuildFlags=&quot;$(echo $RPM_OPT_FLAGS | sed 's#-mminimal-toc##')&quot;</changelog>
<changelog author="olh@suse.de" date="1030363200">- add ppc64_glibc_2.2.5_sunrpc-fix.patch
  * sysdeps/unix/sysv/linux/powerpc/bits/socket.h: New file that adds
  __powerpc64__ specific fields and adjust size/alignment for 64-bit.</changelog>
<changelog author="aj@suse.de" date="1030104000">- Use floating stacks for x86-64.
- Add LICENSE file.
- Fix profiling code on x86-64.
- Add strcspn, strpbrk and strspn optimizations for x86-64.
- Fix makecontext for x86-64.</changelog>
<changelog author="aj@suse.de" date="1029412800">- Use biarch headers already for building so that bits/syscalls.h is
  build correctly.
- Fix bits/syscalls.h for x86-64.
- Remove *xattr patches.</changelog>
<changelog author="kukuk@suse.de" date="1028808000">- Update to current cvs (calloc variable overflow fixed)
- Apply fix for calloc fix
- Add *xattr system calls and error number</changelog>
<changelog author="kukuk@suse.de" date="1028635200">- Update to current cvs (IPv6 fixes)</changelog>
<changelog author="aj@suse.de" date="1028548800">- Implement *context functions for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1028376000">- Update kernel-headers to version 2.4.19
- Add PreRequires &quot;filesystem&quot;.</changelog>
<changelog author="bk@suse.de" date="1028203200">- added s390-may2002.diff with some chunks from may2002 drop
- give make check a second chance on s390(x), but fail if not(race)</changelog>
<changelog author="kukuk@suse.de" date="1028030400">- sunrpc/xdr_array.c: Check for variable overflow
- Ignore failed make check on s390(x)</changelog>
<changelog author="aj@suse.de" date="1028030400">- Add optimisations for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1027944000">- Don't allocate/free category name in setlocale() unnecessarily
  (for IBM Java [Bug #17065]).</changelog>
<changelog author="kukuk@suse.de" date="1027425600">- Update to current glibc cvs (pread/pwrite fixes)
- Remove extra de.po, is in official tarball now.</changelog>
<changelog author="aj@suse.de" date="1027166400">- Fix profiling for x86-64.</changelog>
<changelog author="meissner@suse.de" date="1027080000">- Fixed the PPC64 patch, several superflous files removed.
- Reenabled make check for ppc64.</changelog>
<changelog author="kukuk@suse.de" date="1026907200">- Update to current glibc cvs
- Fix kernel headers for s390/s390x
- Move some binaries/shell scripts and manual pages to the
  correct subpackage</changelog>
<changelog author="meissner@suse.de" date="1026820800">- Merged latest PowerPC patch from IBM.
  * Lots of ppc64 related fixes.
  * Start of biarch support.
  * Changed struct stat in 64bit ABI.</changelog>
<changelog author="aj@suse.de" date="1026475200">- Add biarch patch for s390 and s390x.</changelog>
<changelog author="aj@suse.de" date="1026129600">- Add some optimized x86-64 math routines and a fixed lgammal
  implementation.
- Testsuite on x86-64 should pass now.
- Run ldconfig in postinstall.
- Fix memleak in catgets.</changelog>
<changelog author="kukuk@suse.de" date="1025956800">- Fix typo in create_biarch_asm.sh (asm-sparc path)</changelog>
<changelog author="kukuk@suse.de" date="1025784000">- Fix typo in manpages/Makefile
- Fix filelist (on some archs ld-linux.so.2 was missing)</changelog>
<changelog author="kukuk@suse.de" date="1025784000">- Revert mktime patch (check for year &lt; 70)
- Replace ifarch i386 with ix86
- Add patch for arm
- Include pt_chown again</changelog>
<changelog author="kukuk@suse.de" date="1025697600">- Add more new manual pages
- Fix spec file (renaming of ld-*, creating of include/asm header
  files)
- Update to current CVS version
- Fix kernel-headers for x86-64 (don't overwrite patched version)
- Rename Equador -&gt; Ecuador [Bug #16648]
- Add hint about security problem of host caching with nscd to
  config file.</changelog>
<changelog author="aj@suse.de" date="1025006400">- Fix dl-machine.h for x86-64 to compile with new binutils.
- Fix mtrr.h header for x86-64.
- Do not package pt_chown.</changelog>
<changelog author="sf@suse.de" date="1024401600">- reverted changes from Tue Jun 11 10:04:55 CEST 2002
  (took the kernel-headers from before, readded patch9)
- add new archive with kernel-headers for x86_64
- add autofs patch</changelog>
<changelog author="bk@suse.de" date="1024315200">- remove s390* from the list of archs that ignore check fail</changelog>
<changelog author="uli@suse.de" date="1023969600">- fixed typos in spec</changelog>
<changelog author="schwab@suse.de" date="1023969600">- Fix ssize_t and __ipc_pid_t for ppc64.</changelog>
<changelog author="uli@suse.de" date="1023883200">- fix errlist.c for ARM as well</changelog>
<changelog author="sf@suse.de" date="1023796800">- made new kernel-header archive from kernel-source
- added asm-ppc64 to kernel-headers
- removed patch9 as it is obsoleted by the new kernel-headers</changelog>
<changelog author="olh@suse.de" date="1023451200">- update asm-ppc64/ioctls.h, missing TIOCGDEV</changelog>
<changelog author="olh@suse.de" date="1023364800">- fix glibc-ppc64 patch</changelog>
<changelog author="olh@suse.de" date="1023364800">- update ppc64_glibc_ldconfig.diff</changelog>
<changelog author="ke@suse.de" date="1023364800">- Update de.po from
  http://www.iro.umontreal.ca/contrib/po/teams/PO/de/libc-2.2.5.de.po.
- Use only translated entries to make the testsuite happy; call
  msgattrib on de.po and hu.po [# 16438].</changelog>
<changelog author="aj@suse.de" date="1023105600">- Clean up generation of asm includes for bi-arch systems.
- Enable profiling for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1023105600">- Add fix for weak declaration &quot;_old_sys_nerr&quot;
- Remove already disabled alpha patch
- Update to current CVS</changelog>
<changelog author="olh@suse.de" date="1022932800">- fix stat for real, wrong size for st_nlink</changelog>
<changelog author="olh@suse.de" date="1022673600">- add ppc64_glibc_2.2.5-types.diff, fixes stat()</changelog>
<changelog author="olh@suse.de" date="1022673600">- add ppc64_glibc_ldconfig.diff for elf32/elf64 coexistance</changelog>
<changelog author="aj@suse.de" date="1022155200">- Rename __thread to fix problems with GCC 3.2.</changelog>
<changelog author="olh@suse.de" date="1021896000">- add ppc64 kernel headers
  add create_ppc_asm.sh
  update ppc64 patch, use /lib64/ld64.so.1
  move generic syscalls.list to ppc64/32
  set/getrlimit GLIBC2.0 is ppc32 only
  use parallel make on ppc and ppc64
  do not chroot as user
  cleanup nested ifarch for dynamic linker</changelog>
<changelog author="aj@suse.de" date="1021464000">- Fix building of linuxthreads with current GCC.</changelog>
<changelog author="olh@suse.de" date="1021291200">- fix ppc64 RTLDLIST ld64.so rewrite</changelog>
<changelog author="schwab@suse.de" date="1021118400">- Add div/mod compatibility functions for ia64.</changelog>
<changelog author="olh@suse.de" date="1021032000">- add ppc64 support</changelog>
<changelog author="aj@suse.de" date="1020945600">- Add sys/io.h for x86-64.</changelog>
<changelog author="ihno@suse.de" date="1020686400">- corrected memory calculation for parallel build</changelog>
<changelog author="kukuk@suse.de" date="1020427200">- Add fix to compile math.h on SPARC with g++</changelog>
<changelog author="kukuk@suse.de" date="1020340800">- Update to current CVS 2.2 branch
- Add x86-64 fix for crti.o and /usr/lib64 with libpthread</changelog>
<changelog author="kukuk@suse.de" date="1019822400">- define sqrtl alias for PowerPC</changelog>
<changelog author="aj@suse.de" date="1019476800">- Fix vfork for x86-64.
- Fix handling of ld.so.cache for x86-64.</changelog>
<changelog author="aj@suse.de" date="1019131200">- Allow testsuite to fail for x86-64.
- Add ULPs for x86-64.</changelog>
<changelog author="kukuk@suse.de" date="1019044800">- Update to current snapshot (mktime and dl fixes)
- Update hu.po
- Do not build a profiled glibc for x86-64</changelog>
<changelog author="kukuk@suse.de" date="1018612800">- Update to current snapshot (fix SPARC compile)
- Revert do-lookup.h patch on Alpha (does not work here)</changelog>
<changelog author="aj@suse.de" date="1018440000">- Fix linuxthreads for x86-64.</changelog>
<changelog author="aj@suse.de" date="1018440000">- Add x86-64.diff to fix glob64.</changelog>
<changelog author="kukuk@suse.de" date="1018440000">- Update kernel-headers to 2.4.19pre4 (with x86-64 support)
- Update glibc to current cvs snapshot
- Allow old currencies (before EUR)</changelog>
<changelog author="aj@suse.de" date="1017748800">- Update ULPs.</changelog>
<changelog author="kukuk@suse.de" date="1016712000">- Create html pages after installation of info pages [Bug #15283]</changelog>
<changelog author="kukuk@suse.de" date="1015934400">- Add db1 fix if blocksize is not ^2</changelog>
<changelog author="kukuk@suse.de" date="1015070400">- Add fix for format string bug</changelog>
<changelog author="kukuk@suse.de" date="1015070400">- Fix return value of nice wrapper</changelog>
<changelog author="kukuk@suse.de" date="1014984000">- Add fix for corrupt ut_line
- Add fix for current gcc 3.1
- Add patch for nice return values</changelog>
<changelog author="kukuk@suse.de" date="1014897600">- Add fix for rtime, swscanf and ia64</changelog>
<changelog author="kukuk@suse.de" date="1014033600">- When a dlopened module references a weak symbol from another
  dlopened module (loaded with RTLD_GLOBAL) no dependency was
  generated for this fact, so the second module was unloaded even
  if the first one was still around.</changelog>
<changelog author="kukuk@suse.de" date="1013947200">- Add pthread/signal bugfix [Bug #13280]
- Fix directory file list (don't include /usr/include)</changelog>
<changelog author="kukuk@suse.de" date="1013688000">- Use defattr in spec file to avoid problems with not existing
  UIDs and rpm.</changelog>
<changelog author="aj@suse.de" date="1013688000">- Update ULPs for GCC 3.1.</changelog>
<changelog author="kukuk@suse.de" date="1013601600">- Apply db1 patch from mls@suse.de to fix rpm problems</changelog>
<changelog author="ro@suse.de" date="1013515200">- fix owner/group for kernel headers</changelog>
<changelog author="kukuk@suse.de" date="1013428800">- Add another solution for the glob problem</changelog>
<changelog author="kukuk@suse.de" date="1013083200">- Add fix for glob (glob should not call globfree)
- Add fix for innetgr</changelog>
<changelog author="kukuk@suse.de" date="1012996800">- Use correct BuildRoot</changelog>
<changelog author="kukuk@suse.de" date="1012996800">- Update hu.po</changelog>
<changelog author="kukuk@suse.de" date="1012996800">- Set LC_CTYPE for error messages in localedef [Bug #12878]</changelog>
<changelog author="kukuk@suse.de" date="1012824000">- Add fixes from CVS: dynamic loader, readv and writev seg.fault
  and various architecture fixes for alpha and mips
- Don't compile with -g on Alpha
- Add fix for possible endless loop fix</changelog>
<changelog author="bk@suse.de" date="1012564800">- merged s390x lib64 patch and spec file changes</changelog>
<changelog author="kukuk@suse.de" date="1011787200">- Split glibc into glibc and glibc-locale
- Create more UTF8 locale</changelog>
<changelog author="kukuk@suse.de" date="1011614400">- Update to official glibc 2.2.5</changelog>
<changelog author="kukuk@suse.de" date="1011182400">- Remove /var/adm/setup/setup.timeconfig</changelog>
<changelog author="kukuk@suse.de" date="1011182400">- Apply S390 fix</changelog>
<changelog author="kukuk@suse.de" date="1010577600">- Update to glibc 2.2.5pre1</changelog>
<changelog author="egmont@suselinux.hu" date="1010491200">- Added partial Hungarian translation</changelog>
<changelog author="kukuk@suse.de" date="1010491200">- Add patch to pass math tests with gcc 3.x
- Update to current CVS version</changelog>
<changelog author="kukuk@suse.de" date="1010059200">- Update kernel header files to 2.4.17</changelog>
<changelog author="kukuk@suse.de" date="1009886400">- Update current CVS version, add final fixes for LSB test suite</changelog>
<changelog author="poeml@suse.de" date="1008676800">- Install ja_JP.SJIS locale.</changelog>
<changelog author="schwab@suse.de" date="1008417600">- Fix missing declaration of md5_uintptr.</changelog>
<changelog author="kukuk@suse.de" date="1008331200">- Update to correct CVS branch</changelog>
<changelog author="kukuk@suse.de" date="1008244800">- Update to current CVS
- Increase PATH_MAX to 4096 (including the leading zero)
- Clear pointer if asprintf fails
- pthread_key_delete should not contact thread manager before it
  is created.</changelog>
<changelog author="kukuk@suse.de" date="1008072000">- Fix prelink patch</changelog>
<changelog author="kukuk@suse.de" date="1008072000">- Add fixes for LSB.os test suite (ftw, grantpt and ftok)
- Update to current CVS
- Add prelink patch</changelog>
<changelog author="kukuk@suse.de" date="1007726400">- Merge with current CVS
- Add blowfish crypt</changelog>
<changelog author="uli@suse.de" date="1006516800">- added armv4l arch to spec
- added arm kernel headers
- added trivial fix for dl-machine.h from CVS (see arm.dif)</changelog>
<changelog author="adrian@suse.de" date="1005825600">- add mips architecture to spec file
- apply further mips fixes for ld
- activate %clean again</changelog>
<changelog author="kukuk@suse.de" date="1005480000">- Fix lost permissions of shell script on SPARC</changelog>
<changelog author="kukuk@suse.de" date="1005220800">- Add 32bit UID fixes</changelog>
<changelog author="kukuk@suse.de" date="1005220800">- More fixes for asm-ia64 header files</changelog>
<changelog author="kukuk@suse.de" date="1005220800">- Fix asm-i386/processor.h (don't align struct)
- Fix asm-ia64/bitops.h (define CMPXCHG_BUGCHECK)
- Correct version number in version.h</changelog>
<changelog author="uli@suse.de" date="1005134400">- fixed sys/io.h, sysmacros.h for icc</changelog>
<changelog author="kukuk@suse.de" date="1005048000">- Update kernel-headers to 2.4.14</changelog>
<changelog author="kukuk@suse.de" date="1004616000">- Use again old rules to generate html files</changelog>
<changelog author="schwab@suse.de" date="1003665600">- Fix inttypes.h for C++.</changelog>
<changelog author="aj@suse.de" date="1003492800">- Fix typo in inttypes.h that presents compilation by non-GCC compilers.</changelog>
<changelog author="aj@suse.de" date="1003233600">- Update elf.h to include x86-64 defines since those are needed
  by some other tools.</changelog>
<changelog author="schwab@suse.de" date="1001678400">- Readd patch from 2001-09-10 with corrections.
- Add compatibility patch for GCC 3.  This allows to build glibc
  with GCC 3.
- Require that make check succeeds on ia64.</changelog>
<changelog author="aj@suse.de" date="1000382400">- Add a better version of the threads-fork patch that fixes some
  more places where interrupts can occur and does this a bit cleaner.</changelog>
<changelog author="aj@suse.de" date="1000209600">- Remove patch from 2001-09-10 since it breaks the dynamic linker.</changelog>
<changelog author="aj@suse.de" date="1000209600">- Fix bug in linuxthreads where manager and threads could
  get out of synch due to an interrupted read call.</changelog>
<changelog author="schwab@suse.de" date="1000123200">- Fix handling of dependent dynamic objects for dlopen/dlclose.</changelog>
<changelog author="kukuk@suse.de" date="999950400">- Don't create gconv cache (else iconv --list seg.faults)</changelog>
<changelog author="aj@suse.de" date="999000000">- Improve dynamic linker to relocate dynamic objects faster.  This
  implies a small cache for symbol lookups and handling the ld -z combreloc
  feature if binaries are linked this way.</changelog>
<changelog author="kukuk@suse.de" date="998654400">- Add fix for handling of %l[] in vfscanf
- ldconfig removes stale links now
- Remove susehelp config files, now in susehelp itself</changelog>
<changelog author="aj@suse.de" date="998481600">- Update s390 patch from IBM.</changelog>
<changelog author="kukuk@suse.de" date="998049600">- Adjust dns6 patch for 2.2.4
- Fix spec file (include lost libnss_dns6.so)
- Fix versionnumber in version.h [Bug #9759]
- Update kernel-header to 2.4.9</changelog>
<changelog author="aj@suse.de" date="997963200">- Update to 2.2.4 final.  Add s390-ucontext patch.</changelog>
<changelog author="aj@suse.de" date="997444800">- Update to current glibc version.  Do not use the hardlink program
  for compatification since localedef will do this itself now.
  Create gconv cache.</changelog>
<changelog author="aj@suse.de" date="996667200">- Add patch for zic to create copy of the timezone instead
  of a symbolic link so that the file exists even if /usr is not
  mounted.
  Use i486 instead of i386 as default architecture for i386.</changelog>
<changelog author="kukuk@suse.de" date="996321600">- Fix problem with linux/spinlock.h</changelog>
<changelog author="kukuk@suse.de" date="996235200">- Update kernel-header files to 2.4.7</changelog>
<changelog author="froh@suse.de" date="996148800">- add fix for failing tst-setcontext on s390</changelog>
<changelog author="aj@suse.de" date="996062400">- Add patch to fix loading of dynamic libs in static programs for PPC.</changelog>
<changelog author="kukuk@suse.de" date="995630400">- Update to current CVS snapshot
- Disable tst-regex and test-lfs</changelog>
<changelog author="kukuk@suse.de" date="994420800">- Add da_DK@euro and da_DK.UTF-8</changelog>
<changelog author="kukuk@suse.de" date="994334400">- Update to current CVS snapshot
- Remove obsolete cvs patch
- Fix DNS/IPv6 patch
- Hardlink equal locale files</changelog>
<changelog author="olh@suse.de" date="993211200">- add glibc-2.2.3-ppc_dlmachine.diff to fix binutils make check</changelog>
<changelog author="aj@suse.de" date="992952000">- Fix profiling on PowerPC.</changelog>
<changelog author="bk@suse.de" date="992952000">- added s390x support to spec file</changelog>
<changelog author="schwab@suse.de" date="992606400">- Fixup asm-ia64/atomic.h for user-space inclusion.</changelog>
<changelog author="aj@suse.de" date="992347200">- Fix testsuite for sparc.</changelog>
<changelog author="aj@suse.de" date="992260800">- Fix testsuite for powerpc and S390, build again on alpha.</changelog>
<changelog author="kukuk@suse.de" date="990532800">- Update to current CVS snapshot
- Rmove support for PF_LOCAL from getaddrinfo [Bug #8469]</changelog>
<changelog author="kukuk@suse.de" date="989755200">- Don't use absolute paths in pre-install-section</changelog>
<changelog author="kukuk@suse.de" date="988977600">- Add special version.h which fails on compiling kernel modules</changelog>
<changelog author="kukuk@suse.de" date="988459200">- Update to glibc 2.2.3, kernel-headers-2.4.4</changelog>
<changelog author="schwab@suse.de" date="988113600">- Fix feenableexcept on ia64.</changelog>
<changelog author="aj@suse.de" date="988113600">- Install some more UTF-8 locales, fix tr_TR locale.</changelog>
<changelog author="kukuk@suse.de" date="987076800">- Include our own texi2html</changelog>
<changelog author="kukuk@suse.de" date="986990400">- Add fixes from SuSE kernel header files
- Add patch to reload /etc/resolv.conf if there was changes
- Add glibc.conf for susehelp (glibc-html pages)</changelog>
<changelog author="schwab@suse.de" date="986817600">- Fix ld.so for kernel 2.4.3 on ia64.</changelog>
<changelog author="kukuk@suse.de" date="986472000">- Add more fixes from CVS</changelog>
<changelog author="kukuk@suse.de" date="986299200">- Fix isdn header files from kernel-headers</changelog>
<changelog author="kukuk@suse.de" date="985953600">- Update kernel header files to 2.4.3</changelog>
<changelog author="kukuk@suse.de" date="985953600">- Merge s390 patches
- Fix rcmd_af() (allow PF_UNSPEC)</changelog>
<changelog author="aj@suse.de" date="985953600">- Add some small fixes, fix spec file for removal of man-pages.</changelog>
<changelog author="kukuk@suse.de" date="985867200">- Don't provide kernel_headers any longer
- Remove some man-pages which are now official in the man-pages
  package</changelog>
<changelog author="aj@suse.de" date="985867200">- Fix shmfs recognition.</changelog>
<changelog author="ro@suse.de" date="985867200">- added db-splitmask fix from mls (hopefully work around bug in db1)</changelog>
<changelog author="aj@suse.de" date="985780800">- Fix s390 to not generate wrong relocations, work around compiler
  error.</changelog>
<changelog author="kukuk@suse.de" date="985176000">- glibc-devel obsoletes and provides linclude</changelog>
<changelog author="kukuk@suse.de" date="985089600">- Add strtok and other fixes from CVS
- Add yp_all fix</changelog>
<changelog author="kukuk@suse.de" date="984484800">- Add more s390 string.h fixes</changelog>
<changelog author="aj@suse.de" date="984398400">- Add fixes for s390, don't run testsuite on s390 for now.</changelog>
<changelog author="kukuk@suse.de" date="984139200">- Fix linux/init.h header file</changelog>
<changelog author="aj@suse.de" date="984139200">- Handle new EM_S390 value.</changelog>
<changelog author="kukuk@suse.de" date="984139200">- kernel-heaer fixes to build on Alpha</changelog>
<changelog author="ro@suse.de" date="984052800">- update kernel-headers to 2.4.2</changelog>
<changelog author="ro@suse.de" date="984052800">- kernel-header fixes to build on s390</changelog>
<changelog author="schwab@suse.de" date="982843200">- More kernel header fixes for IA64.</changelog>
<changelog author="kukuk@suse.de" date="982670400">- Remove optimisation not supported on all plattforms</changelog>
<changelog author="kukuk@suse.de" date="982584000">- Fix Optimization of glibc build
- Add Optimization for alphaev6 and sparcv9</changelog>
<changelog author="kukuk@suse.de" date="982411200">- Update to glibc 2.2.2 from CVS</changelog>
<changelog author="kukuk@suse.de" date="982238400">- kernel header fixes for SPARC and IA64</changelog>
<changelog author="kukuk@suse.de" date="982065600">- Make optimization for i686 work
- Add manual page for ldd</changelog>
<changelog author="kukuk@suse.de" date="981979200">- Fix more kernel headers</changelog>
<changelog author="kukuk@suse.de" date="981633600">- Fix more kernel-headers</changelog>
<changelog author="kukuk@suse.de" date="981547200">- Delete links in pre install section for glibc-devel</changelog>
<changelog author="kukuk@suse.de" date="981547200">- Fix kernel-header includes</changelog>
<changelog author="kukuk@suse.de" date="981460800">- Fix creating of /usr/include/asm on SPARC
- Add more CVS patches</changelog>
<changelog author="kukuk@suse.de" date="981374400">- Add some patches from CVS
- Include our own kernel header files</changelog>
<changelog author="aj@suse.de" date="980164800">- Add elf patch to fix problems on ia64 and ppc with _dl_pagesize.</changelog>
<changelog author="aj@suse.de" date="980164800">- Fix mmap64 on powerpc.</changelog>
<changelog author="aj@suse.de" date="979646400">- Fix sunrpc-udp.diff, add mman.h fix for powerpc.</changelog>
<changelog author="aj@suse.de" date="979128000">- Add sunrpc-udp.diff to fix UDP timeouts with Linux 2.4 kernel.</changelog>
<changelog author="aj@suse.de" date="979041600">- Add glibc-2.2.secure.diff to close some security holes.</changelog>
<changelog author="schwab@suse.de" date="978523200">- Fix strtol and friends on 64 bit platforms.
- Use 8192 as default pagesize on ia64.
- Scan AUX vector also in statically linked programs.</changelog>
<changelog author="aj@suse.de" date="978523200">- Build some UTF-8 locales using a patch from Markus Kuhn.</changelog>
<changelog author="aj@suse.de" date="976708800">- Add compatibility patch for IPv6 and Linux 2.2.</changelog>
<changelog author="schwab@suse.de" date="976708800">- Update ia64 patch.</changelog>
<changelog author="kukuk@suse.de" date="976363200">- Fix resolver bug</changelog>
<changelog author="kukuk@suse.de" date="975672000">- Add bug fixes for setlocale and strncat
- strip gconv modules</changelog>
<changelog author="kukuk@suse.de" date="975067200">- Fix typo in spec file</changelog>
<changelog author="kukuk@suse.de" date="974980800">- Add hack for POWER3</changelog>
<changelog author="kukuk@suse.de" date="974894400">- Add strncat bugfix for S/390</changelog>
<changelog author="kukuk@suse.de" date="974808000">- Don't bulid 32bit compat packages</changelog>
<changelog author="schwab@suse.de" date="974721600">- Remove use of getpagesize syscall on ia64.
- Follow DT_INIT/DT_FINI change in compiler.</changelog>
<changelog author="kukuk@suse.de" date="974635200">- Minor specfile fixes</changelog>
<changelog author="kukuk@suse.de" date="974376000">- Add lot of more bug fixes</changelog>
<changelog author="kukuk@suse.de" date="974203200">- Add bugfix for static linked binaries/ld.so.cache from aj@suse.de</changelog>
<changelog author="aj@suse.de" date="974116800">- Fix noversion.diff and spec file.</changelog>
<changelog author="kukuk@suse.de" date="973944000">- Fix nssv1 on PowerPC
- no libNoVersion on SPARC</changelog>
<changelog author="kukuk@suse.de" date="973857600">- Disable make check on PowerPC and Alpha</changelog>
<changelog author="kukuk@suse.de" date="973857600">- Update to final glibc 2.2</changelog>
<changelog author="kukuk@suse.de" date="973252800">- Update to glibc-2.2-20001103 (glibc-2.1.97)
- Don't install libNoVersion on PowerPC
- Rename nssv1 -&gt; glibc-nssv1
- Rename libd -&gt; glibc-profile, move libg.a to libc
- Rename libcinfo -&gt; glibc-info
- Rename libchtml -&gt; glibc-html
- Rename localedb -&gt; glibc-i18ndata
- Rename libc -&gt; glibc-devel
- Rename shlibs -&gt; glibc</changelog>
<changelog author="kukuk@suse.de" date="972734400">- Update to glibc-2.2-20001028
- Enable more checks</changelog>
<changelog author="aj@suse.de" date="972648000">- Fix NoVersion patch</changelog>
<changelog author="kukuk@suse.de" date="972475200">- Update to glibc-2.2-20001025</changelog>
<changelog author="kukuk@suse.de" date="972216000">- Update to glibc 2.2-20001021
- Update glibc-db to 2.1.95
- Update ia64 patch</changelog>
<changelog author="kukuk@suse.de" date="972043200">- Update to glibc 2.2-20001020
- Add s390 spec file changes</changelog>
<changelog author="schwab@suse.de" date="971179200">- Update to glibc 2.2-20001009.
- Fix TRAMPOLINE_TEMPLATE for ia64.</changelog>
<changelog author="schwab@suse.de" date="970401600">- Export more ia64 specific symbols.</changelog>
<changelog author="kukuk@suse.de" date="969969600">- Update to glibc 2.2-20000926</changelog>
<changelog author="kukuk@suse.de" date="969883200">- Update to glibc 2.2-20000925 snapshot</changelog>
<changelog author="schwab@suse.de" date="968932800">- Update ia64 patch.</changelog>
<changelog author="bk@suse.de" date="968414400">- added glibc-2.1.3-db2-s390.tar.gz from developerworks (db2 fix)</changelog>
<changelog author="fober@suse.de" date="968241600">- merge s390-7.0 with STABLE:
  - upgraded to glibc-linuxthreads-2.1.3.1-s390.diff from 2.1.3
  - added new changes from IBM s390 codedrop
  - removed glibc-dlopen-2.1.3-s390.diff which is
    incorporated in glibc-linuxthreads-2.1.3.1-s390.diff now</changelog>
<changelog author="kukuk@suse.de" date="968155200">- Add glibc-2.1.security.dif</changelog>
<changelog author="olh@suse.de" date="967809600">- add glibc-2.1-ppc_lfs.dif, enables (hopefully) lfs on ppc</changelog>
<changelog author="olh@suse.de" date="967636800">- remove sysdeps/powerpc/memset.S on ppc for POWER3</changelog>
<changelog author="olh@suse.de" date="967464000">- add glibc-2.1.sgi_fam.dif
- remove sysdeps/rs6000/memcopy.h on ppc for POWER3</changelog>
<changelog author="garloff@suse.de" date="966859200">- Fix race on cond_wait WRT owner of mutex (from olh@suse.de)</changelog>
<changelog author="kukuk@suse.de" date="964526400">- Add mmap fix for PowerPC</changelog>
<changelog author="kukuk@suse.de" date="963316800">- Remove &quot;mutex is owned by current thread&quot; bugfix for IBMs jdk</changelog>
<changelog author="schwab@suse.de" date="962020800">- Update ia64 patch.</changelog>
<changelog author="kukuk@suse.de" date="961502400">- Move html docu in extra package
- Update ia64 patch</changelog>
<changelog author="kukuk@suse.de" date="959774400">- Remove LICENSE file, it's the same as COPYING.LIB
- Add libc docu as html</changelog>
<changelog author="kukuk@suse.de" date="959515200">- Fix ldconfig on PPC and IA64</changelog>
<changelog author="kukuk@suse.de" date="959428800">- Merge new ldconfig fixes</changelog>
<changelog author="kukuk@suse.de" date="959342400">- Update ia64 patch</changelog>
<changelog author="kukuk@suse.de" date="959342400">- Fix (f)truncate64 and xdr_uint8_t</changelog>
<changelog author="kukuk@suse.de" date="959169600">- Fix ldconfig.8 manual page</changelog>
<changelog author="bk@suse.de" date="958651200">- added s390 dlopen fix</changelog>
<changelog author="bk@suse.de" date="958478400">- updated s390 patches to match IBM_codedrop_2000_05_15</changelog>
<changelog author="kukuk@suse.de" date="958132800">- Fix netinet/in.h IPv6 compare</changelog>
<changelog author="schwab@suse.de" date="958132800">- Update ia64 patches.</changelog>
<changelog author="kukuk@suse.de" date="958132800">- Don't apply LFS patch</changelog>
<changelog author="kukuk@suse.de" date="957873600">- Add LFS patches</changelog>
<changelog author="kukuk@suse.de" date="957787200">- Add lot of bug fixes from CVS</changelog>
<changelog author="kukuk@suse.de" date="956664000">- Fix nscd/getgrnam bug</changelog>
<changelog author="kukuk@suse.de" date="956232000">- Remove /var/mail -&gt; /var/spool/mail patch
- Update nscd.conf.5 manual page</changelog>
<changelog author="kukuk@suse.de" date="955540800">- Add nscd patch from Chris Wing</changelog>
<changelog author="kukuk@suse.de" date="955540800">- Add ldconfig fix from aj@suse.de</changelog>
<changelog author="schwab@suse.de" date="955540800">- More ia64 patches.
- Use libc.so.0, libm.so.0, ld-linux-ia64.so.1 on ia64.</changelog>
<changelog author="kukuk@suse.de" date="955368000">- Support asm-sparc64 and asm-sparc on SPARC</changelog>
<changelog author="kukuk@suse.de" date="955368000">- Create /etc/ld.so.cache always with permissions 0644
- Update ia64 patches</changelog>
<changelog author="schwab@suse.de" date="955022400">- Fix dynamic linker bug in ia64.
- Add ia64 spinlocks for db2.</changelog>
<changelog author="schwab@suse.de" date="954849600">- New IA64 patches.
- Fix ldconfig -p.</changelog>
<changelog author="bk@suse.de" date="954763200">- s390 team added s390 patches</changelog>
<changelog author="kukuk@suse.de" date="953726400">- Fix last SPARC patch</changelog>
<changelog author="kukuk@suse.de" date="953640000">- Add SPARC patches
- Add IA64 patches</changelog>
<changelog author="kukuk@suse.de" date="953121600">- Remove personality call (problematic on Alpha)
- Fix typo in localeconv
- alpha/ioperm.c&gt; Add entry for &quot;Nautilus&quot;.</changelog>
<changelog author="kukuk@suse.de" date="952430400">- Add locale SIGSEGV fix
- Fix getdate bug</changelog>
<changelog author="kukuk@suse.de" date="951480000">- Update to final glibc 2.1.3 + fix for bigendian machines</changelog>
<changelog author="kukuk@suse.de" date="951393600">- Update to current glibc cvs snapshot
- Add libnss_dns6.so.2, which makes IPv4 and IPv6 lookups.
  Old libnss_dns.so.2 will only make IPv4 lookups.</changelog>
<changelog author="kukuk@suse.de" date="951220800">- Update to current glibc cvs snapshot (2.1.3pre4)</changelog>
<changelog author="kukuk@suse.de" date="949752000">- Add missing defines for SPARC bits/termios.h</changelog>
<changelog author="kukuk@suse.de" date="949579200">- Add regex patch from Andreas Schwab</changelog>
<changelog author="kukuk@suse.de" date="949492800">- Add ldconfig fix
- Update to current glibc cvs snapshot
- Fix sys/io.h on Intel (C++)</changelog>
<changelog author="kukuk@suse.de" date="948715200">- Fix duplicate setrlimit</changelog>
<changelog author="kukuk@suse.de" date="948715200">- Update to current glibc cvs snapshot</changelog>
<changelog author="kukuk@suse.de" date="948283200">- Update to current glibc cvs snapshot</changelog>
<changelog author="ro@suse.de" date="947937600">-fixed ppc db2-patch</changelog>
<changelog author="kukuk@suse.de" date="947851200">- Add patches for Intel and PPC</changelog>
<changelog author="kukuk@suse.de" date="947851200">- Add patch for SPARC</changelog>
<changelog author="kukuk@suse.de" date="947764800">- Move info pages to /usr/share/info</changelog>
<changelog author="kukuk@suse.de" date="947505600">- Add ipv6 patches for getent</changelog>
<changelog author="kukuk@suse.de" date="947505600">- Move manual pages for applications and config files into
  shlibs package
- Update to current glibc 2.1.3 snapshot</changelog>
<changelog author="kukuk@suse.de" date="945432000">- Add new ldconfig patches
- Add aio patch
- Add fix for bits/string2.h</changelog>
<changelog author="kukuk@suse.de" date="945259200">- add ldconfig.8</changelog>
<changelog author="kukuk@suse.de" date="945259200">- Update to current glibc 2.1.3 snapshot
- Fix get/setrlimit problems</changelog>
<changelog author="kukuk@suse.de" date="944740800">- Update to current glibc 2.1.3 snapshot
- Add new ldconfig</changelog>
<changelog author="kukuk@suse.de" date="944395200">- Disable make check for SPARC (kernel bug)
- Add setrlimit patches
- Update to current glibc 2.1.3 snapshot</changelog>
<changelog author="kukuk@suse.de" date="943617600">- Update to current glibc 2.1.3 snapshot.</changelog>
<changelog author="kukuk@suse.de" date="940939200">- Add fix for correct accounting of needed bytes (gethnamaddr.c)
- Remove not exported, public names from internal md5 functions</changelog>
<changelog author="kukuk@suse.de" date="940852800">- Add fix for missing nexttowardl aliase</changelog>
<changelog author="kukuk@suse.de" date="940334400">- Add security fix for iruserok</changelog>
<changelog author="kukuk@suse.de" date="940075200">- Build libNoVersion.so.1 on every platform</changelog>
<changelog author="kukuk@suse.de" date="939643200">- Add linuxthreads/signals.c fix from Andreas Schwab
- Remove dangling symlink (Bug #544)
- Add more bug fixes</changelog>
<changelog author="kukuk@suse.de" date="939384000">- Add timezone update</changelog>
<changelog author="kukuk@suse.de" date="939384000">- Add NIS+ shadow parser fix</changelog>
<changelog author="kukuk@suse.de" date="939297600">- Update to official glibc 2.1.2, add important fixes
- Update nscd, add manual pages for it</changelog>
<changelog author="ro@suse.de" date="937828800">- libc: added requires kernel_headers</changelog>
<changelog author="bs@suse.de" date="937224000">- ran old prepare_spec on spec file to switch to new prepare_spec.</changelog>
<changelog author="kukuk@suse.de" date="936619200">- Update to current glibc 2.1.2 cvs snapshot
- Remove use auf automake in spec file</changelog>
<changelog author="kukuk@suse.de" date="936360000">- Update to current glibc 2.1.2 cvs snapshot
- Use RPM macros for configure</changelog>
<changelog author="kukuk@suse.de" date="935582400">- Update to current glibc 2.1.2 cvs snapshot</changelog>
<changelog author="kukuk@suse.de" date="935064000">- Add PowerPC patches from Uli Hecht
- Cleanup of SPEC file
- Create a profiling version</changelog>
<changelog author="kukuk@suse.de" date="934632000">- disable nscd hosts caching by default
- Apply patch from HJL for broken gethostbyname_r in libnss_dns</changelog>
<changelog author="kukuk@suse.de" date="932126400">- Add header fix for autoconf/g++
- Move pt_chown and gconv modules from libc to shlibs</changelog>
<changelog author="kukuk@suse.de" date="931953600">- Remove /etc/localtime from filelist</changelog>
<changelog author="kukuk@suse.de" date="931780800">- Add more bug fixes from cvs
- Add ld.so bug fix from Andreas Schwab</changelog>
<changelog author="kukuk@suse.de" date="931435200">- configure for i386-unknown-linux</changelog>
<changelog author="kukuk@suse.de" date="931348800">- Remove alpha patch, it's now in glibc 2.1.2 cvs
- Add more bug fixes from cvs
- Remove malloc patch (breaks StarOffice)</changelog>
<changelog author="kukuk@suse.de" date="931262400">- Add openpty patch from Andreas Schwab
  (openpty now works if /dev/pts is not mounted)</changelog>
<changelog author="kukuk@suse.de" date="930916800">- Remove warning von zic about symlinks.</changelog>
<changelog author="kukuk@suse.de" date="930571200">- Remove ndbm links, now in gdbm</changelog>
<changelog author="kukuk@suse.de" date="930312000">- Add a lot of more fixes
- Add nscd fixes and enable nscd on alpha</changelog>
<changelog author="kukuk@suse.de" date="929361600">- Add nss_dns and fget* fixes.
- Add nscd patches for NIS+</changelog>
<changelog author="kukuk@suse.de" date="929016000">- Fix daemon() for MT programs
- Add libio fixes</changelog>
<changelog author="kukuk@suse.de" date="927892800">- Add fix for docu
- Disable nscd for alpha again</changelog>
<changelog author="kukuk@suse.de" date="927720000">- Update to version 2.1.1</changelog>
<changelog author="kukuk@suse.de" date="926942400">- Update to snapshot from 16.5.1999
- Add manpages
- Add __setfpucw to libNoVersion (intel)
- Add COPYING and COPYING.LIB</changelog>
<changelog author="kukuk@suse.de" date="926078400">- Update to snapshot from 6.5.1999
- Add NoVersion patches from RedHat for miscompiled glibc 2.0 apps
- Add patch for Alpha RX164
- Add workaround for nscd on Alpha</changelog>
<changelog author="kukuk@suse.de" date="925300800">- Remove latest fnmatch patches from Uli Drepper</changelog>
<changelog author="kukuk@suse.de" date="925214400">- update to cvs version of Apr 26 1999
- fix pmap_set/pmap_unset for DHCP clients
- Rename libdb1.so.2[.1] to libdb.so.2[.1] since we don't create
  the symbolic links.</changelog>
<changelog author="kukuk@suse.de" date="924609600">- update to cvs version of Apr 20 1999
- remove sunrpc.diff
- fix nssv1 package
- only include nscd on intel
- install /etc/nscd.conf</changelog>
<changelog author="kukuk@suse.de" date="923918400">- update to cvs version of Apr 11 1999
- Fix paths in paths.h
- install linuxthreads man pages and documentation
- Add sunrpc patch for Alpha and security fixes
- added links for el_GR and ru_RU.KOI8-R in usr/share/locale</changelog>
<changelog author="bs@suse.de" date="922881600">- don't use lx_hack for build</changelog>
<changelog author="ro@suse.de" date="921585600">- libc.texinfo: changed to build with stable texinfo version</changelog>
<changelog author="ro@suse.de" date="921499200">- update to 2.1.1 (cvs of Mar 15 1999)
- update nssv1 to 2.0.2</changelog>
<changelog author="ro@suse.de" date="919512000">- fixed specfile (lddlibc4 not built on alpha)</changelog>
<changelog author="ro@suse.de" date="919512000">- fixed specfile ...</changelog>
<changelog author="ro@suse.de" date="919512000">- added automake to neededforbuild</changelog>
<changelog author="ro@suse.de" date="919512000">- added nss-v1 modules (to keep old rpm happy with file owners)</changelog>
<changelog author="ro@suse.de" date="919425600">- update to cvs-version of 1999/02/18</changelog>
<changelog author="ro@suse.de" date="906724800">- fixed specfile</changelog>
<changelog author="ro@suse.de" date="906724800">- update: use cvs-version of 980925
  edited db/Makefile to ignore messed up target-dependency</changelog>
<changelog author="ro@suse.de" date="906379200">- update: use cvs-version of 980921</changelog>
<changelog author="ro@suse.de" date="905774400">- update: use today's cvs-version</changelog>
<changelog author="ro@suse.de" date="904737600">- build for 586 since egcs generates code for 686 that does NOT run
  on 586 !!! (eg strtok)</changelog>
<changelog author="ro@suse.de" date="903700800">- updated to cvs-version 20.8.98
  added gettext as neededforbuild (so configure shuts up)
  glibc-linuxthreads is contained in main archive now</changelog>
<changelog author="ro@suse.de" date="897998400">- added symlink usr/include/X11</changelog>
<changelog author="ro@suse.de" date="896356800">- added symlinks to linux include files</changelog>
<changelog author="bs@suse.de" date="896356800">- moved &quot;.so&quot; Links to package libc.</changelog>
<changelog author="bs@suse.de" date="896270400">- changed version do `date`</changelog>
<changelog author="ro@suse.de" date="896270400">- created specfile to build libc, shlibs, libd, libcinfo
    localedb, timezone,
- former libc renamed to libc5.</changelog>
</package>
</otherdata>
