<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="415"><package pkgid="ebb38e4448e04947360ba885d69d824d625364933b5118e55df2f1eac29a6110" name="polkit-default-privs" arch="noarch">
    <version epoch="0" ver="12.3" rel="6.11.1"/>

<changelog author="lnussel@suse.de" date="1326888000">- add org.freedesktop.packagekit.repair-system (bnc#742024)
- fix FSF address
- remove old obsoletes</changelog>
<changelog author="lnussel@suse.de" date="1330516800">- add udisks2 (bnc#742751)</changelog>
<changelog author="lnussel@suse.de" date="1330516800">- add smb4k (bnc#749065)</changelog>
<changelog author="lnussel@suse.de" date="1333022400">- add org.kde.recorditnow.helper.watch (bnc#753908)
- add org.gnome.settings-daemon.plugins.wacom.wacom-led-helper (bnc#750795)</changelog>
<changelog author="lnussel@suse.de" date="1337083200">- add more udisks2 privileges (bnc#761872)</changelog>
<changelog author="lnussel@suse.de" date="1338897600">- fix script name in sysconfig file (bnc#765227)</changelog>
<changelog author="meissner@suse.com" date="1341489600">- relax colord after auditing (bnc#698250)</changelog>
<changelog author="meissner@suse.com" date="1342094400">- allow logged in users to update the system via online updates. bnc#771189</changelog>
<changelog author="meissner@suse.com" date="1350388800">- allow realtimekit at desktop permission (bnc#753849)
- fixed typo</changelog>
<changelog author="meissner@suse.com" date="1350388800">- 12.3 is next opensuse</changelog>
<changelog author="meissner@suse.com" date="1350993600">- added new udisks2 policykit privileges at lowest setting bnc#779404</changelog>
<changelog author="meissner@suse.com" date="1351080000">- added polkit default privs for GNOME control-center (bnc#779938)</changelog>
<changelog author="meissner@suse.com" date="1351857600">- new systemd privileges, mostly allowing applications to inhibit system actions (bnc#783897)</changelog>
<changelog author="meissner@suse.com" date="1361275200">- whitelist PackageKit / systemd offline update permissions, currently admin only
- more systemd allows to make rpmlint happier bnc#783897</changelog>
<changelog author="lnussel@suse.de" date="1361448000">- fix restrictive privileges
- generate javascript files for new polkit (bnc#804376)
- implement check for overrides</changelog>
<changelog author="coolo@suse.com" date="1361620800">- do not own the polkit directories (with different user, creating
  conflict), but buildrequire polkit</changelog>
<changelog author="lnussel@suse.de" date="1361793600">- add some debugging capabilities in generated code</changelog>
<changelog author="lnussel@suse.de" date="1361880000">- set logind inhibit policies to upstream defaults (bnc#804376)
- more elaborate --check-override option</changelog>
<changelog author="lnussel@suse.de" date="1361966400">- require ibmozjs185-1_0 as polkit won't apply the policy without it
  (bnc#804376)</changelog>
<changelog author="lnussel@suse.de" date="1361966400">- add /etc/polkit-1/rules.d/50-default-privs.rules as ghost so it
  gets associated with the package</changelog>

</package>
<package pkgid="8a3dcae649c93e3374bd8fd92659577226f4a64cd7fc2e0c2ae9be067a3b8865" name="kiwi-desc-isoboot" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="18dbae87482f4987da44daa90035c6e73391d9cd84bef867eb604ef92b98e7d3" name="kiwi-desc-netboot" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="afb7fd2008ba40600dda2cf186a9e34aa2e89442f9f2c967a63e2806ee1a722b" name="kiwi-desc-oemboot" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="8ea47ff52590f04d2400daf52c2d4fb26297080e7221db0c78e78714ad15bc85" name="kiwi-desc-vmxboot" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="79b129b6d2c6fc8ff73515d2faa051882c431fc554a83e03fb26b1a06ec05cc8" name="kiwi-doc" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="74627a50ef50a8b20530e5a49360a27d09a91e064511a85928569e32e062040b" name="kiwi-instsource" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="c2fa105e3496b9ce7c71e20a200f8483014e831d51f7eae7234c74197c490b2e" name="kiwi-media-requires" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="1985c5a0c771b85270fa011490c0574749ecbf7c5729406abffe371770d00ba2" name="kiwi-pxeboot" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="362f838753df078cfa20e6821ef42c9634e2c782ff9e37fb9e5041db35a0b562" name="kiwi-templates" arch="noarch">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="b268e20a5dedae1b10a3c8af8981c798f4e1a3a1924c81f48e83fce4f0ea6ef6" name="nautilus-terminal" arch="noarch">
    <version epoch="0" ver="1.0" rel="4.4.1"/>

<changelog author="sbrabec@suse.cz" date="1284379200">- New package, version 0.3.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Updated to version 0.7:
  + Fixes the "Terminal on desktop" bug
  + The terminal is now resizable with mouse (instead of buttons)
  + Updated translations.
- Changes from version 0.6:
  + Add optional scrollbar
  + Nautilus Terminal is now enabled for non-local folders (but
    with the path set on the home folder).
  + The install script now check the dependencies
  + The "terminal on desktop" bug is fixed (lp#642222)
  + Updated translations.
- Changes from version 0.5:
  + Fixes the refresh issue when the terminal is resized
  + Nautilus Terminal is again available in /media.
  + Nautilus Terminal Now support the drag &amp; drop of file.
  + Updated translations.
- Changes from version 0.4:
  + Fixes a lot of bug and add some improvement (restart the shell
    after an "exit" command, Ctrl+Shift+T now toggle Show/Hide).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317211200">- Update to a bzr checkout of the GNOME 3 port (revision 9 of the
  1.x branch):
  + Rewrite for GNOME 3 technologies.
- Add nautilus-terminal-gi-gobject.patch: finish port to pygobject
  3.0, which has some differences with pygobject 2.x.
- Add python-gobject Requires as introspection-based bindings are
  now used.
- Drop python-vte Requires since we don't want the
  non-introspection-based bindings.
- Add python-xdg Recommends: this is an optional dependency, to
  find the configuration file for this extension.
- Mark package as noarch.
- Add have_lang macro, and make all the lang subpackage handling
  depend on its value. Set it to 0 for now, since there is no
  translation in the new branch.</changelog>
<changelog author="vuntz@opensuse.org" date="1326888000">- Update to version 1.0:
  + Implement about dialog.
  + Add accelerators for copy/paste.
  + Implement drag and drop.
  + Bug fixes.
- Drop nautilus-terminal-gi-gobject.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Fix dependencies (bnc#807207):
  + Add gobject-introspection BuildRequires: Needed for the
    automatic typelib()-Requires generator.
  + Drop python-nautilus and python-gobject Requires: they are no
    longer needed, as nautilus-terminal was ported to pygobject.</changelog>

</package>
<package pkgid="b4039e15c5254c022ec99e27c1f593a610a246a04f1ad2b23e83c977a5877fc9" name="percona-toolkit" arch="noarch">
    <version epoch="0" ver="2.1.9" rel="2.4.1"/>

<changelog author="andreas.stieger@gmx.de" date="1346846400">- initial package for Percona Toolkit 2.1.3,
  based on upstream spec file some OBS occurrences
- based on and replacing Maatkit, obsoleting their last release 7410</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to 2.1.4
  * pt-table-checksum: Percona XtraDB Cluster support
  * pt-table-checksum: Implemented the standard --run-time option
  * Implemented the version-check feature in several tools, enabled with the --version-check option
  * Document gdb dependency
  * Unquoted arguments to tr break the bash tools
- fixing the following Percona bugs:
  * pt-diskstats shows wrong device names
  * pt-duplicate-key-checker error parsing InnoDB table with no PK or unique keys
  * pt-online-schema-change dropping FK limitation isn't documented
  * pt-online-schema-changes fails if db+tbl name exceeds 64 characters
  * pt-query-digest --type tcpdump memory usage keeps increasing
  * pt-query-digest won't distill LOCK TABLES in lowercase
  * pt-stalk warns about bad "find" usage
  * pt-stalk df -h throws away needed details
  * pt-stalk --notify-by-email fails
  * pt-stalk does not get all InnoDB lock data
  * pt-summary should show information about Fusion-io cards
  * pt-table-checksum doesn't work if slaves use RBR
  * pt-table-checksum --check-slave-lag docs aren't clear
  * pt-table-checksum --defaults-file isn't used for slaves
  * pt-table-sync and text columns with just whitespace
  * pt-table-sync base_count fails on n = 1000, base = 10
  * pt-table-sync division by zero error with varchar primary key
  * pt-table-sync priv checks need to be removed
  * pt-upgrade error "I need a right_sth argument"
  * sh warnings in pt-summary and pt-mysql-summary
  * ChangeHandler doesn't quote varchar columns with hex-looking values
  * CentOS 5 yum dependency resolution for perl module is wrong
  * Percona Toolkit RPM should contain a dependency on perl-Time-HiRes</changelog>
<changelog author="andreas.stieger@gmx.de" date="1350388800">- update to 2.1.5
  * pt-table-checksum 2.1.4 doesn't detect diffs on Percona XtraDB
    Cluster nodes
  * pt-table-checksum 2.1.4 miscategorizes Percona XtraDB Cluster-based
    slaves as cluster nodes
  * pt-table-sync 2.1.4 --version-check may not work with HTTPS/SSL
  * Missing version-check page</changelog>
<changelog author="andreas.stieger@gmx.de" date="1352635200">- fix SLE 11 build by adding alternative perl macros</changelog>
<changelog author="andreas.stieger@gmx.de" date="1353326400">- update to 2.1.6
  * pt-online-schema-change: Columns can now be renamed without data loss
  * pt-online-schema-change: New --default-engine option
  * pt-stalk: Plugin hooks available through the --plugin option to extend the tool's functionality
- fixing the following bugs
  * --version-check default should be explicitly "off"
  * LOAD DATA LOCAL INFILE broken in some platforms
  * Useless use of cat in Daemon.pm
  * Tools exit 0 on error parsing options, should exit non-zero
  * pt-table-checksum doesn't warn if binlog_format=row or mixed on slaves
  * pt-table-checksum breaks replication if a slave table is missing or different
  * pt-table-checksum doesn't honor --run-time while checking replication lag
  * pt-table-checksum error: Use of uninitialized value in int at line 2778
  * pt-table-checksum can crash with --columns if none match
  * pt-table-checksum dies if creating the --replicate table fails
  * pt-table-checksum doesn't test all hash functions
  * pt-table-checksum 2.1.4 doesn't detect diffs on Percona XtraDB Cluster nodes
  * pt-deadlock-logger can't parse db/tbl/index on partitioned tables
  * pt-online-schema-change DELETE trigger fails when altering primary key
  * pt-online-schema-change fails if sql_mode explicitly or implicitly uses ANSI_QUOTES
  * pt-online-schema-change fails with "I need a max_rows argument"
  * pt-online-schema-change --quiet doesn't disable --progress
  * pt-online-schema-change doesn't report how many warnings it suppressed
  * pt-upgrade fails if select column &gt; 64 chars
  * pt-mysql-summary may report the wrong cnf file
  * pt-mysql-summary incorrectly categorizes databases
  * pt-show-grant doesn't support column-level grants
  * pt-query-digest review table privilege checks don't work
  * pt-query-digest docs for event attributes link to defunct Maatkit wiki
  * pt-duplicate-key-checker fails when it encounters a crashed table
  * pt-stalk deletes non-empty files
  * pt-stalk --no-stalk and --iterations 1 don't wait for the collect
  * pt-fifo-split is processing n-1 rows initially
  * pt-find documentation error with mtime and InnoDB
  * pt-trend output has no header
  * pt-visual-explain docs link to missing pdf
  * pt-fk-error-logger crashes if there's no foreign key error
  * pt-fk-error-logger --dest table example doesn't work</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357905600">- update to 2.1.8
  * Beta support for MySQL 5.6
  * Beta support for Percona XtraDB Cluster
  * pt-online-schema-change: If ran on Percona XtraDB Cluster, requires PXC 5.5.28 or newer
  * pt-table-checksum: If ran on Percona XtraDB Cluster, requires PXC 5.5.28 or newer
  * pt-upgrade: Added --[no]disable-query-cache
- fixing the following bugs:
  * Bad pod2rst transformation
  * Bad online docs formatting for --[no]vars
  * pt-config-diff is case-sensitive
  * pt-config-diff doesn't handle end-of-line comments
  * pt-config-diff Use of uninitialized value in substitution (s///) at line 1996
  * pt-deadlock-logger doesn't handle usernames with dashes
  * pt-heartbeat handles timezones inconsistently
  * pt-kill --log-dsn timestamp is wrong
  * pt-mysql-summary doesn't handle renamed variables in Percona Server 5.5
  * pt-online-schema-change checks for foreign keys on MyISAM tables
  * pt-query-advisor hangs on big queries
  * pt-query-advisor RES.001 is incorrect
  * pt-query-advisor false positive on RES.001
  * pt-query-advisor issues wrong RES.001
  * pt-query-digest fails to parse timestamp with no query
  * pt-query-digest doesn't parse general log with "Connect user as user"
  * pt-query-digest with custom --group-by throws error
  * pt-query-digest prints negative byte offset
  * pt-query-digest help output mangled
  * pt-slave-restart CHANGE MASTER query causes error
  * pt-stalk purge_samples slows down checks
  * pt-stalk does not report NFS iostat
  * pt-table-checksum doesn't ignore tables for --replicate-check-only
  * pt-table-checksum v2 fails when --resume + --ignore-database is used
  * pt-table-checksum debug statement for "Chosen hash func" prints undef
  * pt-table-checksum Illegal division by zero at line 7950
  * pt-table-checksum uninitialized value in numeric lt (&lt;) at line 8611
  * Tools let --set-vars clobber the required SQL mode
- also contains fixes from 2.1.7:
  * pt-table-checksum 2.1.6 crashes using PTDEBUG
  * pt-table-checksum 2.1.6 --check-binlog-format doesn't ignore PXC nodes</changelog>
<changelog author="andreas.stieger@gmx.de" date="1362312000">- update to 2.1.9 [bnc#804102], fixing the following bugs:
  * pt-heartbeat 2.1.8 doesn't use precision/sub-second timestamps
  * pt-heartbeat 2.1.8 reports big time drift with UTC_TIMESTAMP
  * pt-online-schema-change fails with "Duplicate entry" on MariaDB
  * pt-online-schema-change makes bad DELETE trigger if PK is re-created with new columns
  * pt-pmp doesn't list the origin lib for each function
  * pt-query-digest shouldn't print "Error: none" for tcpdump
  * pt-query-digest fails to parse non-SQL errors
  * pt-table-checksum: Confusing error message with binlog_format ROW or MIXED on slave
  * pt-table-sync false-positive error "Cannot nibble table because MySQL chose no index
    instead of the PRIMARY index"
  * pt-stalk is too verbose, fills up log</changelog>

</package>
<package pkgid="8f499ab5d23edfd9a9a38007dfa0fb27419a0c54bee9fef831220c8afd5e21a6" name="systemtap-docs" arch="noarch">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tiwai@suse.de" date="1242820800">- split docs and examples to docs subpackage and generate from its
  own spec file to cut off the dependency loop</changelog>
<changelog author="tiwai@suse.de" date="1242993600">- add missing examples installation in docs subpackage</changelog>
<changelog author="tiwai@suse.de" date="1245153600">- updated to version 0.9.8:
  * Module signing support
  * Debuginfo suggestions when a script fails
  * Using %M in print formats for hex dumps can now print entire
    buffers
  * Dwarfless syscalls: The nd_syscalls tapset is now available to
    probe system calls without requiring kernel debug info.
  * sid() returns the session ID of the current process
  * stringat() indexes a single character from a string.
  * New script examples</changelog>
<changelog author="tiwai@suse.de" date="1245326400">- change to noarch</changelog>
<changelog author="tiwai@suse.de" date="1248177600">- corrected to use libexecdir
- fix summary and description</changelog>
<changelog author="tonyj@suse.de" date="1254484800">- updated to version 1.0.  See systemtap.changes for full changelog.</changelog>
<changelog author="tonyj@novell.com" date="1259755200">- Minor changes to spec file</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1. See systemtap.changes for full changelog.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update to version 1.3</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4. See systemtap.changes for full changelog.</changelog>
<changelog author="jslaby@suse.de" date="1305633600">- fix gcc 4.6 build</changelog>
<changelog author="coolo@novell.com" date="1307448000">- fix file dependencies of examples and testsuite</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1327838400">- add automake too</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Update to version 1.7.  See systemtap.spec for changelog</changelog>
<changelog author="dimstar@opensuse.org" date="1339675200">- Add systemtap-automake112.patch: Fix build with automake 1.12:
  + Support for automatic de-ANSI-fication has been removed.
  + Patch taken from upstream, git commit id 5b2bc70.</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="tonyj@suse.com" date="1357992000">- Update to version 2.0. See systemtap.spec for changelog</changelog>

</package>
<package pkgid="e1edc209fd8160aa8289c47237925e68621567a9886c4994efd42ccf0084ac35" name="timezone-java" arch="noarch">
    <version epoch="0" ver="2013a" rel="2.5.1"/>

<changelog author="dmueller@suse.de" date="1315915200">- update to 2011j:
  * Fix past timezones for Kenya, Uganda, and Tanzani
  * Samoa uses DST in 2011-2012 starting on September 24th 3am</changelog>
<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>

</package>
<package pkgid="bc1f8ad9375a6a92703bfc8fb7db98ee760d94d5e8bb19b898b627d0eab0a49d" name="release-notes-openSUSE" arch="noarch">
    <version epoch="0" ver="12.3.6" rel="1.6.1"/>

<changelog author="ke@suse.de" date="1319716800">- 12.1.3:
  * Enhance GNOME 3 snippet (bnc#725805); Initializing Graphics with KMS
  (Kernel Mode Setting).
  * New entries: CUPS 1.5 (bnc#726178), System Shutdown with systemd
  (bnc#726387).
  * Ship 505 or better translated languages.</changelog>
<changelog author="ke@suse.de" date="1319803200">12.1.4:
  * New entries: systemd: Supplying Service Start-up Parameters
  (bnc#725942).
  * Enhance GNOME 3 snippet (fallback mode, bnc#727039).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1320408000">- 12.1.5:
  * New entry: Booting with systemd or sysvinit (bnc#727092).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1320667200">- 12.1.6:
  * New entry: NetworkManager Command Line Interface (bnc#727537).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1320840000">- 12.1.7:
  * New entries: rpm: %_topdir Changed for Non-root Users (bnc#728841),
  Windows Domain Membership Logon with KDM (bnc#721782), Radeon HDMI
  Sound Output Being Disabled (bnc#729194).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1322222400">- 12.1.8:
  * Update translations (bnc#729717).</changelog>
<changelog author="ke@suse.de" date="1326974400">- 12.2.0:
  * Start resetting for 12.2.</changelog>
<changelog author="ke@suse.de" date="1339761600">- 12.2.1:
  * mount/losetup without cryptoloop.</changelog>
<changelog author="ke@suse.de" date="1341489600">- 12.2.2:
  * Provide txt (UTF-8 encoded) instead of rtf for yast (ncurses).
  * Use official stypesheets to produce HTML (and txt via w3m).
  * Use UTF-8 for HTML output encoding.
  * Link html to rtf for the graphical yast.
  * New entries: sysvinit Deprecated (bnc#769570).
  * Changed entries: Booting with Deprecated sysvinit (bnc#727092 and
  bnc#769570).</changelog>
<changelog author="ke@suse.de" date="1342008000">- 12.2.3:
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1343390400">- 12.2.4:
  * Ensure that the dumped txt files are UTF-8 encoded; bnc#772798.
  * Update translations.
  * Add PDF target.</changelog>
<changelog author="ke@suse.de" date="1343908800">- Build and install PDF files.</changelog>
<changelog author="ke@suse.de" date="1345550400">- 12.2.6:
  * Update translations.
  * Timezone Information in /etc/adjtime; bnc#774716.
  * Remove most of the "checkit" markers (systemd).</changelog>
<changelog author="ke@suse.de" date="1347364800">- 12.3.0:
  * Start resetting for 12.3 and add CHECKIT markers.</changelog>
<changelog author="ke@suse.de" date="1359633600">- 12.3.1:
  * Fix encoding while building .txt from .html using w3m (add -I UTF-8);
  bnc#784291.
  * New entries: SYSLOG_DAEMON Variable Removed (bnc#790805); Configuring
  Postfix (bnc#796161).
  * Changed entries: Initializing Graphics with KMS (Kernel Mode Setting)
  (add grub2; bnc#781700); Cleaning Directories (/tmp and /var/tmp).
  * Removed entries: Booting with Deprecated sysvinit; sysvinit Deprecated.</changelog>
<changelog author="ke@suse.de" date="1360843200">- 12.3.2:
  * Comment remainint entries marked with CHECKIT.</changelog>
<changelog author="ke@suse.de" date="1361448000">- 12.3.3:
  * New entries: UEFI update.
  * Minor changes (bnc#804301; bnc#804315).</changelog>
<changelog author="ke@suse.de" date="1361966400">- 12.3.4:
  * New entries: Gnome: Workaround to Set Shift or Ctrl+Shift as a
  Shortcut (bnc#804773).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1363176000">- 12.3.5 (bnc#808614):
  * New entries: Crypted LVM in UEFI Mode Needs /boot Partition
  (bnc#808104); Enable Secure Boot in YaST Not Enabled by Default When
  in Secure Boot Mode (bnc#808108); No Network after Installation
  (bnc#808111); Wrong Bootloader When Installing from a Live Medium in a
  UEFI Environment (bnc#808116); openSUSE 12.3 Medium May Not Boot on
  Future Secure Boot Enabled Hardware (bnc#808595).
  * Update entries: Gnome: Workaround to Set Shift or Ctrl+Shift as a
  Shortcut (bnc#804773).</changelog>
<changelog author="ke@suse.de" date="1363176000">- 12.3.6:
  * For the moment, disable 'ar' (pdf does not build).</changelog>

</package>
<package pkgid="357c5d34ecced221b427b5459e57498ab13e1837c1237f5389ce65ac8e11786f" name="timezone-java" arch="noarch">
    <version epoch="0" ver="2013b" rel="2.9.1"/>

<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- tzcode and tzdata 2013b
  * Haiti uses US daylight-saving rules this year, and presumably future years.
    This changes time stamps starting today.
  * Paraguay will end DST on March 24 this year.
  * Morocco does not observe DST during Ramadan.</changelog>

</package>
<package pkgid="623536a78494e2f06e80ca728c8a31d64b44b76ba8cdf4d9e882bb6174653074" name="rpmrebuild" arch="noarch">
    <version epoch="0" ver="2.9" rel="7.4.1"/>

<changelog author="hvogel@suse.de" date="1197374400">- Initial Package, Version 2.2.0</changelog>
<changelog author="hvogel@suse.de" date="1207224000">- Update to version 2.2.1
  * fix bug on uid/gid with --pug-from-fs option
  * demo plugin : better error message
  * do not remove /etc/popt : it does not belong our package
  * add new set_tag plugin
  * new demofiles plugin</changelog>
<changelog author="hvogel@suse.de" date="1220875200">- Update to version 2.2.3
  * fix a problem with new rpm security
  * fix a bug when working on package file with path</changelog>
<changelog author="hvogel@suse.de" date="1249473600">- Update to version 2.3
  o fix installation test when repackaged rpm file (with -p)
  o fix for rpm 4.6 that ignore BuildRoot in the spec file flag
  o do not use popt any more</changelog>
<changelog author="hvogel@novell.com" date="1270555200">- Update to version 2.4
  o add -l / --list-plugin option
  o add -5 / --md5-compat-digest option</changelog>
<changelog author="bruno@ioda-net.ch" date="1318507200">- Update to version 2.6
- spec cleaner
- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build-</changelog>
<changelog author="lazy.kent@opensuse.org" date="1363089600">- Update to 2.9.
  * Fix to work with rpm 4.10 - error: incorrect format: invalid
    field width.
- Changes in 2.8.
  * Can handle SUGGESTS/ENHANCES rpm tag.
  * Add --cap-from-fs/cap-from-db options.
- Changes in 2.7.
  * Patch from Andreas Kainz for package file checking.
  * Add new unset_tag plugin.
  * Fix -l / --list-plugin option.
  * Add support of posix capability.
  * Add new un_prelink plugin.
  * Add RPMREBUILD_OPTS environment variable.
  * Fix problem with different architecture (build 32bit on
    64bits).
  * Fix bad arch on gpg-pubkey packages.
- Use full URL as a source.
- Verify GPG signature.
- Package docs.
- Mark man pages as doc.</changelog>

</package>
<package pkgid="0bf65bbb0b5f44d636365d84391b8130e04f5778ab925260e673729b27b567ad" name="yast2-security" arch="noarch">
    <version epoch="0" ver="2.23.5" rel="1.4.1"/>

<changelog author="jsuchome@suse.cz" date="1302004800">- added support for SHA-2 based crypto methods (fate309705)
- 2.21.0</changelog>
<changelog author="jsuchome@suse.cz" date="1311163200">- remove blowfish hash from selections (fate#312321)
- 2.21.1</changelog>
<changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
<changelog author="jsuchome@suse.cz" date="1315483200">- sysctl settings now in /etc/sysctl.conf (bnc#714405)
- 2.21.2</changelog>
<changelog author="jsuchome@suse.cz" date="1316174400">- added option to tune system hibernation rights (bnc#704997)
- 2.21.3</changelog>
<changelog author="jsuchome@suse.cz" date="1316433600">- fixed testsuite
- 2.21.4</changelog>
<changelog author="visnov@suse.cz" date="1317038400">- set dialog title
- 2.21.5</changelog>
<changelog author="jsuchome@suse.cz" date="1318248000">- include etc_polkit-default-privs_local.scr in rpm
- 2.21.6</changelog>
<changelog author="jsuchome@suse.cz" date="1327492800">- confirmed license
- 2.22.0</changelog>
<changelog author="jsuchome@suse.cz" date="1328011200">- use sha512 as default encryption value, not 'des' (bnc#743715)
- 2.22.1</changelog>
<changelog author="jsuchome@suse.cz" date="1329739200">- corectly read/write ctrl-alt-delete behavior when systemd is used
  (bnc#742783)
- 2.22.2</changelog>
<changelog author="jsuchome@suse.cz" date="1332763200">- testsuite adapted to changes in FileUtils.ycp
- 2.22.3</changelog>
<changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts
- 2.22.4</changelog>
<changelog author="jsuchome@suse.cz" date="1333368000">- testsuite: explicitely set the output of target.stat
- 2.22.5</changelog>
<changelog author="jsuchome@suse.cz" date="1351080000">- remove SuSEconfig calls (fate#100011)
- 2.23.0</changelog>
<changelog author="jsuchome@suse.cz" date="1359979200">- testsuite adapted to last changes (SuSEconfig removal)
- 2.23.1</changelog>
<changelog author="jsuchome@suse.cz" date="1360152000">- /etc/default/useradd is dropped (bnc#802006)
- adapted to changes of /etc/login.defs (bnc#802006)
- 2.23.2</changelog>
<changelog author="jsuchome@suse.cz" date="1362571200">- added missing etc_polkit-default-privs_local.scr
- 2.23.3</changelog>
<changelog author="jsuchome@suse.cz" date="1362657600">- drop unused LASTLOG_ENAB support (bnc#807099)
- drop obsoleted GROUP_ENCRYPTION (bnc#802006)
- if key is not present in config file, do not write new value
  (bnc#807099)
- 2.23.4</changelog>
<changelog author="jsuchome@suse.cz" date="1362744000">- remove broken LASTLOG_ENAB entry from /etc/login.defs (bnc#807099)
- 2.23.5</changelog>

</package>
<package pkgid="cff48a778fe29cda38471f76e2d45048f09d2359f7717416ca8ca23a1d90d4ce" name="gnome-control-center-branding-openSUSE" arch="noarch">
    <version epoch="0" ver="12.2" rel="4.4.1"/>

<changelog author="vuntz@opensuse.org" date="1318334400">- Initial package, to provide a YaST item in the control center
  shell.</changelog>
<changelog author="vuntz@opensuse.org" date="1318507200">- Remove %{release} from the gnome-control-center versioned
  Requires, to not have to rebuild this package each time
  gnome-control-center rebuilds to keep it installable.</changelog>
<changelog author="vuntz@opensuse.org" date="1337774400">- Bump version to 12.2, to prepare for next version of openSUSE.</changelog>

</package>
<package pkgid="9a5debdfc8516aa97c1c69626b201549fa39a11370ef7aa18c9821dc63757b01" name="gnome-control-center-branding-upstream" arch="noarch">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="52912af740d567730562174f2d9b43c65b3d38f9f712e8ecbbdedd3bb7ab5c04" name="gnome-control-center-lang" arch="noarch">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="69cd49ca8818695ccb5cfe6573efb64e7c527a711b0d458df0c88e7bc17a1d9b" name="gnome-settings-daemon-lang" arch="noarch">
    <version epoch="0" ver="3.6.3" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1337083200">- Update to version 3.4.2:
  + General:
  - Fix memory leaks
  + Media-keys:
  - Fix applications launching through keyboard shortcuts not
    using the session's ssh agent, or keyrings
  + Mouse:
  - Fix arguments passed to the custom command
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Add gnome-settings-daemon-reduce-tap-delay.patch to reduce the
  delay between the last keystroke and the first touchpad tap when
  the option "Disable touchpad when typing" is enabled in mouse
  options in gnome-control-center (bgo#590783)
- Add gnome-settings-daemon-only-inhibit-touchpad-tapping.patch to
  inhibit only tapping and not affect pointer motion or scrolling
  using the touchpad when the option "Disable touchpad when
  typing" is enabled in mouse options in gnome-control-center
  (bgo#673055)
- Pass --libexecdir option to ./configure to change the
  installation dir of program executables to
  %{_libexecdir}/gnome-settings-daemon-3.0; fixes bnc#758592.</changelog>
<changelog author="dimstar@opensuse.org" date="1339243200">- Update to version 3.5.2:
  + Remove ability to D-Bus activate
  + Media keys:
  - Get proper gnome-keyring environment
  - Simplify the OSD code
  - Add keybindings to switch input sources
  + Mouse:
  - Fix applying settings to newly added touchpads
  - Reduce default touchpad deactivation to 1s
  + Housekeeping:
  - Split out 'ignore unix mount' code
  + Keyboard:
  - Always apply xmodmap
  - Lots of cleanups
  - Apply XKB layouts ourselfs and stop relying on libgnomekbd
  + Power:
  - Disconnect from upower signals when needed
  - Add org.gnome.settings-daemon.plugins.power.lid-close-
    suspend-with-extrnal-monitors
    key to allow forcing suspend on lid close
  + Print:
  - Fix setting of default media size
  - Don't create an unused proxy object
  - Speed up initialization
  + Updates:
  - Automatically download updates rather than installing them
  + Wacom:
  - Disable wacom support on s390
  - Disable wacom support on non-linux
  - Don't put touchscreens in relative mode
  - Make tablet configuration per-machine
  + Color:
  - Be quiet about unloadable profiles
  + Updated translations.
- Drop pkgconfig(libxklavier), pkgconfig(libgnomekbd) and
  pkgconfig(libgnomekbdui) BuildRequires.
- Add pkgconfig(xkbfile) BuildRequires: add upstream after
  libgnomekbd dependency got dropped.
- Drop gnome-settings-daemon-reduce-tap-delay.patch: fixed upstream
- Rebase gnome-settings-daemon-bnc462640-mute-action.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1340625600">- Update to version 3.5.3:
  + Housekeeping:
  - Support new XDG thumbnail directory locations
  + Keyboard A11y:
  - Don't crash when changing large print in fallback mode
  - Link to an existing help page
  + Keyboard:
  - Don't crash if LANG is empty
  + Media-keys:
  - Make &lt;Super&gt; keyboard shortcuts work again
  - Use systemd to shutdown or suspend if available
  + Mouse:
  - Only inhibits mouse clicks and scrolls with syndaemon
  + Power:
  - End the lid-close safety timer when the lid gets opened
  - Update fallback status icon on icon state change
  - Don't leak notifications
  - Avoid duplicate translations
  - Use systemd to shutdown or suspend if available
  - Don't enable backlight helper if GUdev is not available
  + Updates:
  - Adapt to new upstream property name
  - Add a notification for offline updates
  + Wacom:
  - Update display mapping on monitor changes
  - Flag unknown devices created from fallback
  - Add keep aspect ratio option
  - Use GnomeRROutput instead of GnomeRROutputInfo
  - Match built-in monitor
  + XRandr:
  - Explicitly set clone state variable when generating monitor
    configs.
- Drop gnome-settings-daemon-only-inhibit-touchpad-tapping.patch:
  fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 3.5.4:
  + Printers:
  - Don't block the session with unreachable printers
  + Wacom:
  - Fix crasher related to screen matching</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 3.5.5:
  + Add test applications for a number of plugins
  + Color:
  - Fix notification-related memory leaks
  + Housekeeping:
  - Fix notification-related memory leaks
  + Keyboard:
  - Add support for switching to IBus input methods
  + Updates:
  - Remove unused settings
  - Remove a number of unused notifications
  - Don't ever live-update packages in the session
  - Fix a number of memory leaks
  - Prevent crash if a device that requires a firmware is removed
    before the firmware search completes
  + Wacom:
  - Fix crasher related to screen tablets
  - Do not rotate "pad" devices
  - Apply display rotation to device that's mapped to it
  - Make shortcuts that require Shift work as expected
  - Re-apply calibration and aspect-ratio when the screen changes
    but don't apply it to touch devices.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Build:
  - Add optional man page.
  - List plugin schemas as children of the main schema.
  + Keyboard:
  - Require ibus 1.4.99 for ibus support.
  + Mouse:
  - If one device was ignored, we would ignore all the devices.
  + Smartcard:
  - Don't try to use smartcard drivers that didn't load.
  + Updates:
  - Remove unused code.
  - Avoid compilation warnings due to PackageKit API changes.
  + Wacom:
  - Avoid a warning at login.
- Add xsltproc BuildRequires: needed to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Keyboard:
  - Apply XKB options
  + Mouse:
  - Add support for natural scroll for touchpads
  + Power:
  - Fix D-Bus path of the screensaver
  + Wacom:
  - Implement the "switch monitor" combination
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Keyboard:
  - Don't handle IBus for fallback, it will use the same UI it
    always did.
  - Hook IBus support for legacy applications.
  + Mouse:
  - Fix natural-scroll not working until switched off and on
    again.
  + Power:
  - Do not attempt to change the brightness of an output that was
    disabled.
  - Fix idle blank and sleep timeout.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Add explicit pkgconfig(libpulse-mainloop-glib) BuildRequires:
  we forgot to add it when adding pkgconfig(libpulse).
- Add pkgconfig(xext) BuildRequires: new explicit dependency in
  3.5.5 for the power plugin that needs the XSync API.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Drop gnome-settings-daemon-bnc461755-randr-rotate-wacom.diff:
  this needed to be rebased for a long time, and there's a rocking
  support for wacom tablets upstream now. So this is most likely
  not needed anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Keyboard:
  - Don't block getting the IBus global engine.
  - Don't touch the XKB layout if no input sources were
    configured.
  - Fix gtk+ IM module getting set to IBus for XKB sources.
  + Media keys:
  - Make "toggle brightness" work.
  + Color:
  - Don't warn about non-existent DMI file.
  + Power:
  - Fix some instances where an external screen would turn off.
  + Wacom:
  - Require wacom 0.6 to fix bugs with some tablets.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Create sources from the X layouts if the configuration is empty
  + Always do that in GDM, so system-wide layouts work
  + Add modifiers-only shortcuts to switch input sources.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349870400">- Update to version 3.6.1:
  + Color:
  - Fix possible crashers on exit
  + Keyboard:
  - Allow grabbing the Menu key
  - Apply XKB variants and options for each IBus engine
  - Don't setup legacy toolkits if IBus is missing
  - Add default setup for some particular languages
  - Convert old libgnomekbd and IBus configurations
  - Add support for more modifiers only combinations
  - Fix input switching eating the modifiers keys in some cases
  + Mouse:
  - Fix "Locate Pointer" eating the Ctrl key
  - Fix "Locate Pointer" animation showing when the Ctrl key has
    been used
  + Updates:
  - Never show the user a message about cancelled transactions
  + Wacom:
  - Fix LEDs switching for some tablet models
  + Housekeeping:
  - Fix possible crashers on exit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352376000">- Update to version 3.6.2:
  + Make test applications work when libnotify was used.
  + Keyboard:
  - Add default ibus engine for Indic locales.
  - Prevent 100% CPU usage related to remembering Num-Lock state.
  - Don't print warning messages when resuming from suspend.
  + Power:
  - Fix screen dimming and power saving even when inhibited.
  - Don't suspend, dim or blank when running in virtual machines.
  - Fix warning output in the Brightness &amp; Lock panel.
  - Fix possible crash when the backlight fails to be turned off
    for example.
  + Sound:
  - Fix alert sound changes requiring a log out/login to apply.
  + Updates:
  - Don't require the user to click OK to clear the message for
    successful offline updates.
  + Wacom:
  - Fix touchstrips and touchrings without a modeswitch.
  + XSettings:
  - Make startup smoother by batching settings updates together.
- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Keyboard: Add keyboard shortcuts including CapsLock to switch
    input sources..
  + Mouse: Fix horizontal natural scrolling.
  + Power: Fix a warning on startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1358078400">- Add gnome-settings-daemon-notify-idle-resumed.patch, notify user
  about auto suspend when returning from sleep (bnc#708182).</changelog>
<changelog author="dimstar@opensuse.org" date="1358683200">- Add gnome-settings-daemon-double-suspend.patch: Fix double
  suspend: if GNOME is configured to suspend on lid close, the
  system goes directly back in sleep upon a wakeup call. Only the
  2nd wake up is successful and persistent. This issue comes from
  systemd and gnome both executing suspend.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add gnome-settings-daemon-restore-datetime-plugin.patch: needed
  for gnome-control-center to properly toggle NTP given that
  timedated is broken on openSUSE; needed until the corresponding
  gnome-control-center patch is removed (bnc#796055).</changelog>

</package>
<package pkgid="e07921468d5b5b470bc6a521c66ba7fa3960791ebc9c1d95ff3e7b151128825e" name="kdebase4-openSUSE-lang" arch="noarch">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="fd7c22e310c0711c046b8269878b4275b4feccf3517ee8e802ae0495e29b3b32" name="pulseaudio-lang" arch="noarch">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="d97ab28ee9a284100f9586141208c529e8a8ae28e3518a509ad14b1412c0c1f7" name="firebird-doc" arch="noarch">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="92a1c579e06c95bf404f2973512c1c150c9a230de0b62a6df6fc293ef583bfd5" name="krb5-doc" arch="noarch">
    <version epoch="0" ver="1.10.2" rel="10.5.2"/>

<changelog author="mc@suse.de" date="1216987200">- add patches from SVN post 1.6.3
  * some fixes in the man pages</changelog>
<changelog author="mc@suse.de" date="1234785600">- update to pre 1.7 version
  * remove outdated documentation for kadm5 API</changelog>
<changelog author="mc@suse.de" date="1242216000">- update to version 1.7 Beta2</changelog>
<changelog author="mc@suse.de" date="1244030400">- update to final version 1.7</changelog>
<changelog author="mc@suse.de" date="1267704000">- update to version 1.8</changelog>
<changelog author="mc@suse.de" date="1269345600">- add post 1.8 fixes
  * Document the ticket_lifetime libdefaults setting</changelog>
<changelog author="mc@suse.de" date="1270814400">- update to version 1.8.1</changelog>
<changelog author="mc@suse.de" date="1314014400">- update to version 1.9.1</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2</changelog>
<changelog author="idonmez@suse.com" date="1346673600">- Build depend on texinfo &amp; texlive-dvips to fix the build</changelog>

</package>
<package pkgid="2a15d3faddd64053d16485284b6f4092dcf95eaf7ee9de1c5717a31581a81768" name="perl-doc" arch="noarch">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="df4b929b2d0f6edaca7186a7d95b78a124f439500e5fe394a56a7a23ec78cef7" name="libpurple-branding-upstream" arch="noarch">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="413ec694065d2122ce79765b6e8daac2143e58e93e89a41e28a40b0047d78f0d" name="libpurple-lang" arch="noarch">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="ffb9441adcf7eceb4d806c8f3c321af61cdab3ec139e7cdd105e7a4238a6a8e3" name="typo3-cms-4_5" arch="noarch">
    <version epoch="0" ver="4.5.25" rel="2.4.1"/>

<changelog author="Thomas.Worm@DATEV.de" date="1346932800">- Initial package version 4.5.19</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1347019200">- Changed installation directory from /usr/share/typo3-4.5 to
  /usr/share/typo3-4_5.
- Added PHP requirements to spec file.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1351080000">- Raised to version 4.5.20
  * Raise submodule pointer
  * Update md5 sums for 4.5.20
  * Update backend sprites according to rebranding
  * Introduce "TYPO3 CMS" in EXT: about (t3#41823)
  * Adjust Logos to new style-guide (t3#41704)
  * Prevent saltedpasswords destroying the password (t3#41828)
  * bugfix: RTE: Paste as plain text doesn't work in
    Safari (Mac only) (t3#35356)
  * bugfix: CE with "All languages" doesn't show with every lang (t3#24087)
  * bugfix: CE with "All languages" isn't shown in Page module (t3#24087)
  * bugfix: Proper cursor icon in access module (t3#33230)
  * bugfix: Fix the additional icon check (t3#41463)
  * bugfix: Fix translation moving in workspaces (t3#33592)
  * bugfix: strftime expects parameter 2 to be long, string given (t3#38717)
  * bugfix: RTE: array_flip warning on array of languages (t3#35147)
  * bugfix: Words with special characters not added to personal
    dictionary (t3#38653)
  * bugfix: htmlArea RTE: Cursor jumps to first letter with Chrome 22 (t3#41411)
  * bugfix: Do not save expand state for root node in TCA tree (t3#31978)
  * bugfix: File upload button is collapsed in Chrome 21 (t3#39659)
  * bugfix: Switch to List module on root page leads to blank page (t3#40781)
  * bugfix: Error handler registration accepts way too much PHP error
    types (t3#31827)
  * bugfix: Tree view in admin panel is broken with PHP 5.4 (t3#41213)
  * bugfix: Error handler callback causes fatal error for parse time
    errors (t3#31834)
  * bugfix: Error messages are not shown in 123 installation process (t3#41158)
  * bugfix: Database creating fails due to not allowed characters (t3#41151)
  * bugfix: Set charset property after cloning t3lib_PageRenderer (t3#27957)
  * bugfix: PHP warning when no language pack is available (t3#40108)
  * Set TYPO3 version to 4.5.20-dev
  * dbal: Update md5 sum for 4.5.20
  * extbase: Update version number to 1.3.4
  * extbase, bugfix: (Persistence) Make Typo3QuerySettings exchangeable
  * extbase, bugfix: Declare LocalizationUtility::translateFileReference static
  * fluid: Update version number to 1.3.1
  * fluid, bugfix: Return empty result in pagination if page does not exist
  * linkvalidator: Raise version number for 4.5.20
  * linkvalidator, bugfix: Field name 'location' is case insensitive (t3#40486)
  * version: Raise version number for 4.5.20
  * workspaces: Raise version number for 4.5.20
  * workspaces, feature: set default grid limit to 30 (t3#26287)
- Renamed package from typo3-4_5 to typo3-cms-4_5 due to name change of
  software product.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1352808000">- Raised to version 4.5.22
  * Raise submodule pointer (TYPO3 Release Team)
  * Raise version numbers of system extensions (Steffen Ritter)
  * bugfix: imagecopyresized: correct invalid parameters (Stefan Neufeind), t3#26660
  * Fix TYPO3 logos (Helmut Hummel), t3#42850
  * Raise submodule pointer (TYPO3 Release Team)
  * bugfix: t3#42812 Most checkboxes (like Extended View) are not working (Michael Spä), t3#42812
  * Set TYPO3 version to 4.5.22-dev (TYPO3 Release Team)
  * security: Fix SQL injection and XSS in record history (Oliver Hader), t3#42696
  * security: XSS in TCA Tree (Oliver Hader), t3#42774
  * security: Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel), t3#42776
  * Raise submodule pointer (TYPO3 Release Team)
  * bugfix: No sorting in TypoScript Object Browser when browsing (Nicole Cordes), t3#39677
  * bugfix: Translated non-published page in workspace breaks live workspace (Oliver Hader), t3#42281
  * bugfix: Illegal string offsets in t3lib_stdgraphic (Wouter Wolters), t3#38024
  * bugfix: PHP 5.4 warning in CLI context in switch back user (Christian Kuhn), t3#37578
  * bugfix: t3lib_div: adjust substUrlsInPlainText to also work on URLs at end of sentence (Robert Heel), t3#28248
  * bugfix: Wrong call to TSFE in FrontendEditing (Steffen Ritter), t3#40733
  * Fix generation of ext_emconf.php (Wouter Wolters), t3#42444
  * bugfix: t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland), t3#38699
  * bugfix: TCEForms.Suggest wizard in IRRE records (Nicole Cordes), t3#27020
  * Fix case of tests folder (Xavier Perseguers)
  * bugfix: Unit test for saltedpasswords fail (Xavier Perseguers)
  * bugfix: RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland), t3#36087
  * bugfix: RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland), t3#29685
  * bugfix: Extension Import not working with postgresql and DBAL (Ernesto Baschny), t3#38406
  * Set TYPO3 version to 4.5.21-dev (TYPO3 Release Team)</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised to version 4.5.23
  * Raise submodule pointer
  * bugfix: t3lib_iconWorks must check if array exists before using it, t3#24248
  * bugfix: BE user switch impossible when in adminOnly mode, t3#32686
  * bugfix: Excludefieds must exclude admin only tables, t3#34460
  * bugfix: TypoLink: absolute urls when installed in subfolder, t3#33214
  * Raise submodule pointer
  * bugfix: [Cache][PDO] Duplicate cache entry possible, t3#34129
  * bugfix: IE9 compatibility clear cache menu, t3#36364
  * bugfix: Hook call modifyDBRow in ContentContentObject, t3#44416
  * bugfix: Fix misspelling in RTE meta menu, t3#43886
  * bugfix: load TCA before manipulation, t3#38505
  * DataHandler::getAutoVersionId() should be public, t3#45050
  * bugfix: Load date-time picker in scheduler module, t3#31027
  * bugfix: Quick Edit triggers warnings of missing key uid, t3#42845
  * Raise submodule pointer
  * bugfix: Fix warnings in em on tab Maintenance, t3#39680
  * bugfix: Correct TCA inclusion for uploads rendering, t3#44145
  * bugfix: Update description on changed error reporting defaults, t3#38240
  * bugfix: Fix typos in stdWrap_crop description, t3#43919
  * bugfix: Apc Cache backend has side effects, t3#38135
  * bugfix: Invalid call to t3lib_TCEmain::processRemapStack(), t3#44301
  * Raise submodule pointer
  * bugfix: Suggest wizard is behind form inputs, t3#42092
  * bugfix: phpdoc: $urlParameters can be a string, t3#44263
  * bugfix: FE session records are never removed, t3#34964
  * bugfix: INTincScript_loadJSCode() causes PHP warnings, t3#32278
  * bugfix: Enable the RTE with WebKit version 534 on iOS and Android, t3#43603
  * bugfix: Remove HTML in RuntimeException from sysext 'install', t3#38472
  * bugfix: Fix wrong column title in web&gt;list for field colpos, t3#25113
  * bugfix: SqlParser: trim all kinds of whitespaces, t3#43470
  * Remove typo3.pageModule.js, t3#43459
  * bugfix: Installer: Reference images wrong, t3#42292
  * bugfix: Page Information shows incorrect number of total hits, t3#41608
  * bugfix: Old logo on "Install Tool is locked" page, t3#42908
  * openid: Update php-openid to 2.2.2, t3#42236
  * Group excludefields by table, t3#34098
  * bugfix: Hide version selector if workspaces are used, t3#43264
  * Raise submodule pointer</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised to version 4.5.24
  * Raise submodule pointer (TYPO3 Release Team)
  * security: Open redirection with jumpurl (Franz G. Jahn), t3#28587, bnc#808528, CVE-2013-1843
  * bugfix: Check minitems for TCAtree (Georg Ringer), t3#25003
  * bugfix: Keep hyphens in custom HTML5 attributes (Jigal van Hemert), t3#34371
  * Revert "[BUGFIX] FE session records are never removed" (Oliver Hader), t3#45570
- security fix: Typo3 Extbase Framework SQL Injection, bnc#808528, CVE-2013-1842</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362830400">- Raised to version 4.5.25
  * bugfix: External URL regression by jumpurl security fix (Helmut Hummel), t3#46071</changelog>

</package>
<package pkgid="7a3285281de5966d717542eab4b8bc7dc26b43da27821668880c4ec99440c128" name="typo3-cms-4_6" arch="noarch">
    <version epoch="0" ver="4.6.18" rel="2.4.1"/>

<changelog author="Thomas.Worm@DATEV.de" date="1346932800">- Initial package version 4.6.12</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1347019200">- Changed installation directory from /usr/share/typo3-4.6 to
  /usr/share/typo3-4_6.
- Added PHP requirements to spec file.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1351080000">- Raised version to 4.6.13
  * Update md5 sums for 4.6.13
  * Update backend sprites according to rebranding
  * bugfix: Localization fallback does not work in Backend (t3#41996)
  * Adjust Logos to new style-guide (t3#41704)
  * bugfix: BE user switch impossible when in adminOnly mode (t3#32686)
  * bugfix: Validation of umlaut URLs and mail addresses (t3#30311)
  * bugfix: Excludefieds must exclude admin only tables (t3#34460)
  * bugfix: undefined variable imgExt (t3#34446)
  * bugfix: t3lib_iconWorks must check if array exists before using it
    (t3#24248)
  * Introduce "TYPO3 CMS" in EXT: about (t3#41823)
  * bugfix: Make generated thumbnails browser-cachable (t3#21481)
  * bugfix: TCEForms.Suggest wizard in IRRE records (t3#27020)
  * bugfix: Warning in list module (t3#39678)
  * bugfix: Endless loop in flushOutputBuffers() (t3#40126)
  * bugfix: Take versioned record into account for showHidden flag. (t3#33392)
  * bugfix: Fix SQL error in Livesearch with empty TCA sortby setting (t3#40816)
  * bugfix: Pagetree - Prevent a call to moveNode while creating nodes
    (t3#39820)
  * bugfix: FLUIDTEMPLATE - Serialization of 'Closure' is not allowed (t3#36820)
  * bugfix: Prevent saltedpasswords destroying the password (t3#41828)
  * bugfix: RTE: Localization to content language does not work (t3#39271)
  * bugfix: imagecopyresized: correct invalid parameters (t3#26660)
  * bugfix: RTE: Paste as plain text doesn't work in Safari (Mac only)
    (t3#35356)
  * bugfix: CE with "All languages" doesn't show with every lang (t3#24087)
  * bugfix: CE with "All languages" isn't shown in Page module (t3#24087)
  * bugfix: Proper cursor icon in access module (t3#33230)
  * Group excludefields by table (t3#34098)
  * bugfix: User settings don't remember that default language is selected
    (t3#31943)
  * bugfix: Make alphanum. filter work with umlauts (t3#35284)
  * bugfix: Fix the additional icon check (t3#41463)
  * bugfix: Fix translation moving in workspaces (t3#33592)
  * bugfix: strftime expects parameter 2 to be long, string given (t3#38717)
  * bugfix: RTE: array_flip warning on array of languages (t3#35147)
  * bugfix: Fix compressor flooding typo3temp (t3#40409)
  * bugfix: JS error in IE7 while starting RTE (t3#40082)
  * bugfix:  Words with special characters not added to personal dictionary
    (t3#38653)
  * bugfix: RTE is not loading in IE8, when used with feedit (t3#40558)
  * bugfix: htmlArea RTE: Cursor jumps to first letter with Chrome 22
    (t3#41411)
  * bugfix: Do not save expand state for root node in TCA tree (t3#31978)
  * bugfix: File upload button is collapsed in Chrome 21 (t3#39659)
  * bugfix: Switch to List module on root page leads to blank page (t3#40781)
  * bugfix: Error handler registration accepts way too much PHP error types
    (t3#31827)
  * bugfix: Tree view in admin panel is broken with PHP 5.4 (t3#41213)
  * bugfix: Error handler callback causes fatal error for parse time errors
    (t3#31834)
  * bugfix: Error messages are not shown in 123 installation process (t3#41158)
  * bugfix: Database creating fails due to not allowed characters (t3#41151)
  * bugfix: autoloader should ignore non existing extensions (t3#39649)
  * bugfix: Link to install tool in reports leads to old page (t3#37067)
  * bugfix: pi_getLL() alternative language translation fails (t3#39850)
  * bugfix: L10n PHP parser stores NULL for unknown key (t3#40643)
  * bugfix: L10n parser interface is wrongly defined (t3#40641)
  * bugfix: Compressor: filemtime(): stat failed in Help &gt; About TYPO3
    (t3#35212)
  * bugfix: Set charset property after cloning t3lib_PageRenderer (t3#27957)
  * revert: Invalid fallback for non-localized labels" (t3#39814)
  * bugfix: PHP warning when no language pack is available (t3#40108)
  * bugfix: Multi-table relationship not recognized in t3lib_loadDBGroup
    (t3#34148)
  * Set TYPO3 version to 4.6.13-dev
  * dbal: Update md5 sum for 4.6.13
  * extbase: Update version number to 1.4.5
  * extbase, bugfix: Fix translation fallback
  * extbase, bugfix: Declare LocalizationUtility::translateFileReference static
  * fluid: Update version number to 1.4.2
  * fluid, bugfix: Return empty result in pagination if page does not exist
  * linkvalidator: Update md5 sum for 4.6.13
  * version: Update version number to 4.6.13
  * workspaces: Update version number to 4.6.13
- Renamed package from typo3-4_6 to typo3-cms-4_6 due to name change of
  software product.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1352808000">- Raised version to 4.6.15
  * Raise version numbers of system extensions (Steffen Ritter)
  * bugfix: imagecopyresized: correct invalid parameters (Stefan Neufeind), t3#26660
  * Fix TYPO3 logos (Helmut Hummel), t3#42850
  * bugfix: t3#42812 Most checkboxes (like Extended View) are not working (Michael Spä), t3#42812
  * security: Fix SQL injection and XSS in record history (Oliver Hader), t3#42696
  * security: XSS in TCA Tree (Oliver Hader), t3#42774
  * security: Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel), t3#42776
  * Raise submodule pointer (TYPO3 Release Team)
  * bugfix: No sorting in TypoScript Object Browser when browsing (Nicole Cordes), t3#39677
  * bugfix: Translated non-published page in workspace breaks live workspace (Oliver Hader), t3#42281
  * bugfix: Illegal string offsets in t3lib_stdgraphic (Wouter Wolters), t3#38024
  * bugfix: PHP 5.4 warning in CLI context in switch back user (Christian Kuhn), t3#37578
  * bugfix: t3lib_div: adjust substUrlsInPlainText to also work on URLs at end of sentence (Robert Heel), t3#28248
  * bugfix: Wrong call to TSFE in FrontendEditing (Steffen Ritter), t3#40733
  * bugfix: PHP warning: open_basedir restriction (Xavier Perseguers), t3#42054
  * Fix generation of ext_emconf.php (Wouter Wolters), t3#42444
  * bugfix: t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland), t3#38699
  * bugfix: New form wizard not loading in IE8 (Sebastian Schawohl), t3#33504
  * bugfix: Fix case of tests folder (Xavier Perseguers)
  * bugfix: Unit test for saltedpasswords fail (Xavier Perseguers)
  * bugfix: RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland), t3#36087
  * bugfix: RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland), t3#29685
  * bugfix: Extension Import not working with postgresql and DBAL (Ernesto Baschny), t3#38406
  * bugfix: Creating new pages via drag'n'drop respects page TS (Philipp Kitzberger), t3#25021
  * Set TYPO3 version to 4.6.14-dev (TYPO3 Release Team)</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised version to 4.6.16
  * bugfix: L10n fallback does not work for TS labels, t3#44099
  * bugfix: L10n fallback does not work for ExtJS in BE, t3#44273
  * Raise submodule pointer
  * bugfix: Allow "en" as language key, t3#42084
  * Raise submodule pointer
  * bugfix: [Cache][PDO] Duplicate cache entry possible, t3#34129
  * bugfix: IE9 compatibility clear cache menu, t3#36364
  * bugfix: Hook call modifyDBRow in ContentContentObject, t3#44416
  * bugfix: Fix misspelling in RTE meta menu, t3#43886
  * bugfix: load TCA before manipulation, t3#38505
  * bugfix: add check for empty form values in FORM View, t3#28606
  * DataHandler::getAutoVersionId() should be public, t3#45050
  * bugfix: Quick Edit triggers warnings of missing key uid, t3#42845
  * Raise submodule pointer
  * bugfix: Fix warnings in em on tab Maintenance, t3#39680
  * bugfix: Correct TCA inclusion for uploads rendering, t3#44145
  * bugfix: Update description on changed error reporting defaults, t3#38240
  * bugfix: Fix typos in stdWrap_crop description, t3#43919
  * bugfix: Apc Cache backend has side effects, t3#38135
  * bugfix: Invalid call to t3lib_TCEmain::processRemapStack(), t3#44301
  * Raise submodule pointer
  * bugfix: Suggest wizard is behind form inputs, t3#42092
  * bugfix: phpdoc: $urlParameters can be a string, t3#44263
  * bugfix: FE session records are never removed, t3#34964
  * bugfix: INTincScript_loadJSCode() causes PHP warnings, t3#32278
  * bugfix: Fix broken logo file in Install Tool, t3#43426
  * bugfix: Remove HTML in RuntimeException from sysext 'install', t3#38472
  * bugfix: Fix wrong column title in web&gt;list for field colpos, t3#25113
  * bugfix: SqlParser: trim all kinds of whitespaces, t3#43470
  * Remove typo3.pageModule.js, t3#43459
  * bugfix: Installer: Reference images wrong, t3#42292
  * bugfix: Page Information shows incorrect number of total hits, t3#41608
  * bugfix: Old logo on "Install Tool is locked" page, t3#42908
  * bugfix: Form values with newlines escaped in email, t3#32515
  * openid: Update php-openid to 2.2.2, t3#42236
  * bugfix: Wizard in HTML element moved to t3editor, t3#33813
  * bugfix: Livesearch toolbar should close others, t3#32890
  * bugfix: Hide version selector if workspaces are used, t3#43264
  * bugfix: Subject field in FormWizard, t3#35787
  * Raise submodule pointer
  * bugfix: Invalid behavior of search for integer in Backend search, t3#33700
  * fluid, bugfix: Unit test fails with broken timezone, t3#45285
  * fluid, bugfix: Date ViewHelper not using configured Timezones, t3#12769
  * fluid, bugfix: Fix typo and improve backup of system settings, t3#45218
  * fluid, bugfix: Remove PHP Error caused by setlocale call, t3#45118
  * fluid, bugfix: Incomplete locale backup in unit test, t3#44835
  * fluid, bugfix: selectViewHelper sorting should respect locales, t3#43445
  * fluid, bugfix: Image viewhelper clears $GLOBALS['TSFE'] in backend context, t3#43446
  * fluid, bugfix: AbstractFormFieldViewHelper always converts entities, t3#34091
  * linkvalidator, bugfix: SQL error in getLinkCounts, t3#43322
  * version, bugfix: Catchable fatal error when using the swap button, t3#42948</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised version to 4.6.17
  * Raise submodule pointer (TYPO3 Release Team)
  * security: Open redirection with jumpurl (Franz G. Jahn), t3#28587, bnc#808528, CVE-2013-1843
- security fix: Typo3 Extbase Framework SQL Injection, bnc#808528, CVE-2013-1842</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362830400">- Raised verstion to 4.6.18
  * bugfix: External URL regression by jumpurl security fix (Helmut Hummel), t3#46071</changelog>

</package>
<package pkgid="967834e9f499449f51d87ce81fa0eb9a5c3174feb44de04a1248ebabb8778744" name="typo3-cms-4_7" arch="noarch">
    <version epoch="0" ver="4.7.10" rel="2.4.1"/>

<changelog author="Thomas.Worm@DATEV.de" date="1346932800">- Initial package version 4.7.4</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1347019200">- Changed installation directory from /usr/share/typo3-4.7 to
  /usr/share/typo3-4_7.
- Added PHP requirements to spec file.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1351080000">- Raised to version 4.7.5
  * Raise submodule pointer
  * Update version number to 4.7.5
  * bugfix: Localization fallback does not work in Backend (t3#41996)
  * Update backend sprites according to rebranding
  * Adjust Logos to new style-guide (t3#41704)
  * Introduce "TYPO3 CMS" in EXT: about (t3#41823)
  * bugfix: Prevent saltedpasswords destroying the password (t3#41828)
  * bugfix: RTE: Localization to content language does not work (t3#39271)
  * bugfix: RTE: paste as plain text does not work in IE9 (t3#39389)
  * bugfix: CE with "All languages" doesn't show with every lang (t3#24087)
  * bugfix: Fix the additional icon check (t3#41463)
  * bugfix: FLUIDTEMPLATE - Serialization of 'Closure' is not allowed (t3#36820)
  * bugfix: Make alphabetic filter work with umlauts (t3#35296)
  * bugfix: Pagetree - Prevent a call to moveNode while creating nodes
    (t3#39820)
  * bugfix: Make alphanum. filter work with umlauts (t3#35284)
  * feature: Add several testcases for validators (t3#35333)
  * bugfix: Fix SQL error in Livesearch with empty TCA sortby setting (t3#40816)
  * bugfix: Take versioned record into account for showHidden flag. (t3#33392)
  * Disable Memcache tests for now
  * bugfix: Endless loop in flushOutputBuffers() (t3#40126)
  * bugfix: MEDIA element ignores audio fallback (t3#39416)
  * bugfix: Hardcoded fileadmin directory in Import-Export (t3#41120)
  * bugfix: CE with "All languages" isn't shown in Page module (t3#24087)
  * bugfix: backColor transparent causes black background or flickering
    (t3#32781)
  * bugfix: strftime expects parameter 2 to be long, string given (t3#38717)
  * bugfix: Fix compressor flooding typo3temp (t3#40409)
  * Start memcached on travis-ci build
  * bugfix: Words with special characters not added to personal dictionary
    (t3#38653)
  * bugfix: RTE is not loading in IE8, when used with feedit (t3#40558)
  * bugfix: htmlArea RTE: Cursor jumps to first letter with Chrome 22 (t3#41411)
  * bugfix: *_user table password field is to short (t3#39356)
  * bugfix: Do not save expand state for root node in TCA tree (t3#31978)
  * bugfix: File upload button is collapsed in Chrome 21 (t3#39659)
  * bugfix: Error handler registration accepts way too much PHP error types
    (t3#31827)
  * bugfix: Tree view in admin panel is broken with PHP 5.4 (t3#41213)
  * bugfix: Error handler callback causes fatal error for parse time errors
    (t3#31834)
  * bugfix: Follow-up to GeneralUtility::logDeprecatedFunction() (t3#40521)
  * bugfix: Fatal error in GeneralUtility::logDeprecatedFunction() (t3#40521)
  * bugfix: Error messages are not shown in 123 installation process (t3#41158)
  * Database creating fails due to not allowed characters (t3#41151)
  * bugfix: autoloader should ignore non existing extensions (t3#39649)
  * bugfix: Switch to List module on root page leads to blank page (t3#40781)
  * bugfix: Link to install tool in reports leads to old page (t3#37067)
  * bugfix: pi_getLL() alternative language translation fails (t3#39850)
  * bugfix: L10n PHP parser stores NULL for unknown key (t3#40643)
  * bugfix: L10n parser interface is wrongly defined (t3#40641)
  * bugfix: Compressor: filemtime(): stat failed in Help &gt; About TYPO3
    (t3#35212)
  * bugfix: Set charset property after cloning t3lib_PageRenderer (t3#27957)
  * revert: Invalid fallback for non-localized labels (t3#39814)
  * bugfix: config.pageTitleSeparator not known by t3editor (t3#39600)
  * bugfix: PHP warning when no language pack is available (t3#40108)
  * bugfix: Warning in list module (t3#39678)
  * Set TYPO3 version to 4.7.5-dev
  * dbal: Update version number to 4.7.5
  * extbase: Update version number to 4.7.5
  * extbase: phpdoc-fixes
  * extbase, bugfix: Fix translation fallback
  * extbase, bugfix: Declare LocalizationUtility::translateFileReference static   * extbase, bugfix: ObjectManager dependencies in SignalSlot registration
  * extbase, bugfix: Possible failure in dependency injection
  * fluid: Update version number to 4.7.5
  * fluid, bugfix: Return empty result in pagination if page does not exist
  * linkvalidator: Update version number to 4.7.5
  * version: Update version number to 4.7.5
  * revert: Sent notification when changes are published
  * workspaces: Update version number to 4.7.5
- Renamed package from typo3-4_7 to typo3-cms-4_7 due to name change of
  software product.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1352808000">- Raised to version 4.7.7
  * Raise version numbers of system extensions (Steffen Ritter)
  * bugfix: Regression in t3lib_iconWorks::imagecopyresized (Tymoteusz Motylewski), t3#39563
  * Fix TYPO3 logos (Helmut Hummel), t3#42850
  * bugfix: getFuncCheck must quotes wrong (Michael Spä), t3#42812
  * security: Fix SQL injection and XSS in record history (Oliver Hader)
  * security: XSS in TCA Tree (Oliver Hader), t3#42696
  * security: Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel), t3#42774
  * Raise submodule pointer (TYPO3 Release Team), t3#42776
  * bugfix: No sorting in TypoScript Object Browser when browsing (Nicole Cordes), t3#39677
  * bugfix: Translated non-published page in workspace breaks live workspace (Oliver Hader), t3#42281
  * bugfix: Illegal string offsets in t3lib_stdgraphic (Wouter Wolters), t3#38024
  * Use correct branch for travis integration build (Helmut Hummel)
  * bugfix: PHP 5.4 warning in CLI context in switch back user (Christian Kuhn), t3#37578
  * bugfix: RTE: Link class not always set in Firefox (Stanislas Rolland), t3#39662
  * bugfix: Restore display of mount points path (Francois Suter), t3#42046
  * bugfix: Wrong call to TSFE in FrontendEditing (Steffen Ritter), t3#40733
  * bugfix: PHP warning: open_basedir restriction (Xavier Perseguers), t3#42054
  * bugfix: Fix usage of fileadminDir (Helmut Hummel), t3#42454
  * Fix generation of ext_emconf.php (Wouter Wolters), t3#42444
  * Clean-up EXT: aboutmodules, adapt to "TYPO3 CMS" (Felix Kopp), t3#41980
  * bugfix: t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland), t3#38699
  * bugfix: New form wizard not loading in IE8 (Sebastian Schawohl), t3#33504
  * bugfix: Unit test for saltedpasswords fail (Xavier Perseguers)
  * bugfix: RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland), t3#36087
  * bugfix: RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland), t3#29685
  * bugfix: Extension Import not working with postgresql and DBAL (Ernesto Baschny), t3#38406
  * Set TYPO3 version to 4.7.6-dev (TYPO3 Release Team)
- Added some fixes to work with PHP 5.4</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362484800">- Raised to version 4.7.8
  * bugfix: L10n fallback does not work for TS labels, t3#44099
  * bugfix: L10n fallback does not work for ExtJS in BE, t3#44273
  * Raise submodule pointer
  * bugix: Allow "en" as language key, t3#42084
  * Raise submodule pointer
  * bugfix: [Cache][PDO] Duplicate cache entry possible, t3#34129
  * bugfix: IE9 compatibility clear cache menu, t3#36364
  * bugfix: Hook call modifyDBRow in ContentContentObject, t3#44416
  * bugfix: Fix misspelling in RTE meta menu, t3#43886
  * bugfix: load TCA before manipulation, t3#38505
  * bugfix: add check for empty form values in FORM View, t3#28606
  * DataHandler::getAutoVersionId() should be public, t3#45050
  * bugfix: Possible warning in about module, t3#44892
  * bugfix: Quick Edit triggers warnings of missing key uid, t3#42845
  * Raise submodule pointer
  * bugfix: Fix warnings in em on tab Maintenance, t3#39680
  * bugfix: EXT:felogin: Multiple bugs with preserveGETvars, t3#19938
  * bugfix: Correct TCA inclusion for uploads rendering, t3#44145
  * bugfix: array_merge_recursive_overrule: __UNSET for array values, t3#43874
  * bugfix: Update description on changed error reporting defaults, t3#38240
  * bugfix: Fix typos in stdWrap_crop description, t3#43919
  * Add save only button to Scheduler task, t3#44152
  * bugfix: Apc Cache backend has side effects, t3#38135
  * bugfix: Invalid call to t3lib_TCEmain::processRemapStack(), t3#44301
  * Raise submodule pointer
  * Suggest wizard is behind form inputs, t3#42092
  * bugfix: phpdoc: $urlParameters can be a string, t3#44263
  * bugfix: FE session records are never removed, t3#34964
  * bugfix: INTincScript_loadJSCode() causes PHP warnings, t3#32278
  * bugfix: Fix broken logo file in Install Tool, t3#43426
  * bugfix: Enable the RTE with WebKit version 534 on iOS and Android, t3#43603
  * bugfix: IE9 crashes after saving with RTE, t3#43766
  * bugfix: Remove HTML in RuntimeException from sysext 'install', t3#38472
  * bugfix: Compatibility fix for get_html_translation_table(), t3#39287
  * bugfix: Fix wrong column title in web&gt;list for field colpos, t3#25113
  * bugfix: SqlParser: trim all kinds of whitespaces, t3#43470
  * Remove typo3.pageModule.js, t3#43459
  * bugfix: Installer: Reference images wrong, t3#42292
  * bugfix: Page Information shows incorrect number of total hits, t3#41608
  * bugfix: Old logo on "Install Tool is locked" page, t3#42908
  * bugfix: Form values with newlines escaped in email, t3#32515
  * openid: Update php-openid to 2.2.2, t3#42236
  * bugfix: Hide version selector if workspaces are used. t3#43264
  * bugfix: Subject field in FormWizard, t3#35787
  * Raise submodule pointer
  * Invalid behavior of search for integer in Backend search, t3#33700</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised to version 4.7.9
  * Raise submodule pointer (TYPO3 Release Team)
  * security: Open redirection with jumpurl (Franz G. Jahn), t3#28587, bnc#808528, CVE-2013-1843
  * bugfix: Invalid RSA key when submitting form twice (Benjamin Mack), t3#40085
- security fix: Typo3 Extbase Framework SQL Injection, bnc#808528, CVE-2013-1842</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Added rpmlintrc to suppress duplicated files warning.</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362830400">- Raised to version 4.7.10
  * bugfix: External URL regression by jumpurl security fix (Helmut Hummel), t3#46071</changelog>

</package>
<package pkgid="3a5c0c955e1a930fd567ab56a6da21dbd6953f9feb5ae5fda0d057388fd8b049" name="libpurple-branding-openSUSE" arch="noarch">
    <version epoch="0" ver="12.2" rel="4.4.1"/>

<changelog author="vuntz@novell.com" date="1219838400">- New package to change pidgin default configuration.</changelog>
<changelog author="sbrabec@suse.cz" date="1223294400">- Conflict with other branding providers (FATE#304881).</changelog>
<changelog author="vuntz@opensuse.org" date="1296648000">- Bump version to 11.4.
- Provide the right version of pidgin-branding; add pidgin
  BuildRequires for this.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Bump version to 12.1.
- Update summary and description.
- Create a libpurple-branding-openSUSE subpackage, and do not build
  a pidgin-branding-openSUSE subpackage:
  + the configuration file is also important for other clients than
    pidgin, so we want to brand libpurple.
  + however, since there is also pidgin-related content in the same
    file, we also make libpurple-branding-openSUSE act as
    pidgin-branding-openSUSE (with Provides, Conflicts, Supplements
    that are usual for a branding package).
  + also add appropriate Provides/Obsoletes for
    pidgin-branding-openSUSE, for smooth upgrades.
- Add Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1318507200">- Remove %{release} from the pidgin versioned Requires, to not have
  to rebuild this package each time pidgin rebuilds to keep it
  installable.</changelog>
<changelog author="vuntz@opensuse.org" date="1337774400">- Bump version to 12.2, to prepare for next version of openSUSE.</changelog>
<changelog author="meissner@suse.com" date="1363867200">- updated to match pidgin version update bnc#804742</changelog>

</package>
<package pkgid="bb3598f99961bc3c820c0ad139efec84b8a0719da43532539513e99603976a88" name="polkit-default-privs" arch="src">
    <version epoch="0" ver="12.3" rel="6.11.1"/>

<changelog author="lnussel@suse.de" date="1326888000">- add org.freedesktop.packagekit.repair-system (bnc#742024)
- fix FSF address
- remove old obsoletes</changelog>
<changelog author="lnussel@suse.de" date="1330516800">- add udisks2 (bnc#742751)</changelog>
<changelog author="lnussel@suse.de" date="1330516800">- add smb4k (bnc#749065)</changelog>
<changelog author="lnussel@suse.de" date="1333022400">- add org.kde.recorditnow.helper.watch (bnc#753908)
- add org.gnome.settings-daemon.plugins.wacom.wacom-led-helper (bnc#750795)</changelog>
<changelog author="lnussel@suse.de" date="1337083200">- add more udisks2 privileges (bnc#761872)</changelog>
<changelog author="lnussel@suse.de" date="1338897600">- fix script name in sysconfig file (bnc#765227)</changelog>
<changelog author="meissner@suse.com" date="1341489600">- relax colord after auditing (bnc#698250)</changelog>
<changelog author="meissner@suse.com" date="1342094400">- allow logged in users to update the system via online updates. bnc#771189</changelog>
<changelog author="meissner@suse.com" date="1350388800">- allow realtimekit at desktop permission (bnc#753849)
- fixed typo</changelog>
<changelog author="meissner@suse.com" date="1350388800">- 12.3 is next opensuse</changelog>
<changelog author="meissner@suse.com" date="1350993600">- added new udisks2 policykit privileges at lowest setting bnc#779404</changelog>
<changelog author="meissner@suse.com" date="1351080000">- added polkit default privs for GNOME control-center (bnc#779938)</changelog>
<changelog author="meissner@suse.com" date="1351857600">- new systemd privileges, mostly allowing applications to inhibit system actions (bnc#783897)</changelog>
<changelog author="meissner@suse.com" date="1361275200">- whitelist PackageKit / systemd offline update permissions, currently admin only
- more systemd allows to make rpmlint happier bnc#783897</changelog>
<changelog author="lnussel@suse.de" date="1361448000">- fix restrictive privileges
- generate javascript files for new polkit (bnc#804376)
- implement check for overrides</changelog>
<changelog author="coolo@suse.com" date="1361620800">- do not own the polkit directories (with different user, creating
  conflict), but buildrequire polkit</changelog>
<changelog author="lnussel@suse.de" date="1361793600">- add some debugging capabilities in generated code</changelog>
<changelog author="lnussel@suse.de" date="1361880000">- set logind inhibit policies to upstream defaults (bnc#804376)
- more elaborate --check-override option</changelog>
<changelog author="lnussel@suse.de" date="1361966400">- require ibmozjs185-1_0 as polkit won't apply the policy without it
  (bnc#804376)</changelog>
<changelog author="lnussel@suse.de" date="1361966400">- add /etc/polkit-1/rules.d/50-default-privs.rules as ghost so it
  gets associated with the package</changelog>

</package>
<package pkgid="e77632c9839a10a89f3d53b09b4f2841aa7e6bcd0dbf5b6b981f35239dff6a49" name="bindfs" arch="src">
    <version epoch="0" ver="1.12" rel="2.4.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1268568000">- initial package (1.8.4)</changelog>
<changelog author="jengelh@medozas.de" date="1336219200">- Update to new upstream version 1.10.2
  * No changelog was provided
- Remove redundant sections/tags from specfile
- Enable parallel build</changelog>
<changelog author="jengelh@inai.de" date="1341403200">- Update to new upstream version 1.10.6
  * a memory bug from 1.10.1, and --create-as-user and thread
  safety regressions were resolved
  * honor CFLAGS in ./configure call
  * fix a short-allocation that led to a crash in bindfs_readdir
  * implement a lookup cache to speed up repeated lookups
  (helpful for networked user databases, e.g. on LDAP)</changelog>
<changelog author="jengelh@inai.de" date="1350388800">- Update to new upstream release 1.11
  * Be single-threaded by default due to an inherent race condition;
  use -o multithreaded to get the old behavior back.
  * Respect setgid bit on directories when using --create-as-user</changelog>
<changelog author="jengelh@inai.de" date="1362139200">- Update to new upstream release 1.12
  * Replace "-o user" and "-o group" with "-o force-user" and
  "-o force-group", because the former are standard mount options
  that mount(8) consumes and does not pass on to the helper.
  (bnc#806956)</changelog>

</package>
<package pkgid="c34df698fd2aa57b082e7222d8254588378b9f9c8d196f27db5a5337c54da87c" name="cmis-client" arch="src">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="5f51b880789581bc69552e22b609997bb3884561fb4fbbf328e844ae12349b93" name="gtkglext" arch="src">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1108123200">- New SuSE package, version 1.0.6.</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="sbrabec@suse.cz" date="1170158400">- Updated to version 1.2.0:
  * Build GtkGLExt against GTK+ &gt;= 2.8.
  * Typo fixes, documentation update.
- Prefix changed to /usr.
- Spec file cleanup.</changelog>
<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="515564c83998e1e0dc96086514a363113a3ca46b36327cb229f897ecfa2798e6" name="kiwi" arch="src">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="33b884dfbcd78f5728b0a511e1761c1292b01d1673d7a1b4e6d52f15ea2d1266" name="mono-core" arch="src">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="2d0c6c2d7ebd4503acb62d72437db15517c069823ae8de2c144cfa0598562a23" name="nautilus-terminal" arch="src">
    <version epoch="0" ver="1.0" rel="4.4.1"/>

<changelog author="sbrabec@suse.cz" date="1284379200">- New package, version 0.3.</changelog>
<changelog author="prusnak@opensuse.org" date="1288267200">- Updated to version 0.7:
  + Fixes the "Terminal on desktop" bug
  + The terminal is now resizable with mouse (instead of buttons)
  + Updated translations.
- Changes from version 0.6:
  + Add optional scrollbar
  + Nautilus Terminal is now enabled for non-local folders (but
    with the path set on the home folder).
  + The install script now check the dependencies
  + The "terminal on desktop" bug is fixed (lp#642222)
  + Updated translations.
- Changes from version 0.5:
  + Fixes the refresh issue when the terminal is resized
  + Nautilus Terminal is again available in /media.
  + Nautilus Terminal Now support the drag &amp; drop of file.
  + Updated translations.
- Changes from version 0.4:
  + Fixes a lot of bug and add some improvement (restart the shell
    after an "exit" command, Ctrl+Shift+T now toggle Show/Hide).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317211200">- Update to a bzr checkout of the GNOME 3 port (revision 9 of the
  1.x branch):
  + Rewrite for GNOME 3 technologies.
- Add nautilus-terminal-gi-gobject.patch: finish port to pygobject
  3.0, which has some differences with pygobject 2.x.
- Add python-gobject Requires as introspection-based bindings are
  now used.
- Drop python-vte Requires since we don't want the
  non-introspection-based bindings.
- Add python-xdg Recommends: this is an optional dependency, to
  find the configuration file for this extension.
- Mark package as noarch.
- Add have_lang macro, and make all the lang subpackage handling
  depend on its value. Set it to 0 for now, since there is no
  translation in the new branch.</changelog>
<changelog author="vuntz@opensuse.org" date="1326888000">- Update to version 1.0:
  + Implement about dialog.
  + Add accelerators for copy/paste.
  + Implement drag and drop.
  + Bug fixes.
- Drop nautilus-terminal-gi-gobject.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1362398400">- Fix dependencies (bnc#807207):
  + Add gobject-introspection BuildRequires: Needed for the
    automatic typelib()-Requires generator.
  + Drop python-nautilus and python-gobject Requires: they are no
    longer needed, as nautilus-terminal was ported to pygobject.</changelog>

</package>
<package pkgid="e6e8fb693c5e6f532cc1d017940fa42a985823e3e5683fe43cba3fe9f861ad41" name="parkverbot" arch="src">
    <version epoch="0" ver="1.1" rel="6.4.1"/>

<changelog author="jengelh@inai.de" date="1336478400">- Initial package for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1354536000">- Replace bad signature by a new one</changelog>
<changelog author="sbrabec@suse.cz" date="1354536000">- Verify GPG signature.</changelog>
<changelog author="jengelh@inai.de" date="1359633600">- Update to new upstream release 1.1 (bugfix release)
  * Fixed passing wrong type to ioctl, which made a 32-bit parkverbot
  exit and not run at all (bnc#801367)
  * Read all disks, rather than a single one, per interval
- systemd is not a runtime requirement</changelog>

</package>
<package pkgid="8b1563a0d6d5280b0801dd9efaa5651f2633819a689aef2fdcab2abf1677f57c" name="percona-toolkit" arch="src">
    <version epoch="0" ver="2.1.9" rel="2.4.1"/>

<changelog author="andreas.stieger@gmx.de" date="1346846400">- initial package for Percona Toolkit 2.1.3,
  based on upstream spec file some OBS occurrences
- based on and replacing Maatkit, obsoleting their last release 7410</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to 2.1.4
  * pt-table-checksum: Percona XtraDB Cluster support
  * pt-table-checksum: Implemented the standard --run-time option
  * Implemented the version-check feature in several tools, enabled with the --version-check option
  * Document gdb dependency
  * Unquoted arguments to tr break the bash tools
- fixing the following Percona bugs:
  * pt-diskstats shows wrong device names
  * pt-duplicate-key-checker error parsing InnoDB table with no PK or unique keys
  * pt-online-schema-change dropping FK limitation isn't documented
  * pt-online-schema-changes fails if db+tbl name exceeds 64 characters
  * pt-query-digest --type tcpdump memory usage keeps increasing
  * pt-query-digest won't distill LOCK TABLES in lowercase
  * pt-stalk warns about bad "find" usage
  * pt-stalk df -h throws away needed details
  * pt-stalk --notify-by-email fails
  * pt-stalk does not get all InnoDB lock data
  * pt-summary should show information about Fusion-io cards
  * pt-table-checksum doesn't work if slaves use RBR
  * pt-table-checksum --check-slave-lag docs aren't clear
  * pt-table-checksum --defaults-file isn't used for slaves
  * pt-table-sync and text columns with just whitespace
  * pt-table-sync base_count fails on n = 1000, base = 10
  * pt-table-sync division by zero error with varchar primary key
  * pt-table-sync priv checks need to be removed
  * pt-upgrade error "I need a right_sth argument"
  * sh warnings in pt-summary and pt-mysql-summary
  * ChangeHandler doesn't quote varchar columns with hex-looking values
  * CentOS 5 yum dependency resolution for perl module is wrong
  * Percona Toolkit RPM should contain a dependency on perl-Time-HiRes</changelog>
<changelog author="andreas.stieger@gmx.de" date="1350388800">- update to 2.1.5
  * pt-table-checksum 2.1.4 doesn't detect diffs on Percona XtraDB
    Cluster nodes
  * pt-table-checksum 2.1.4 miscategorizes Percona XtraDB Cluster-based
    slaves as cluster nodes
  * pt-table-sync 2.1.4 --version-check may not work with HTTPS/SSL
  * Missing version-check page</changelog>
<changelog author="andreas.stieger@gmx.de" date="1352635200">- fix SLE 11 build by adding alternative perl macros</changelog>
<changelog author="andreas.stieger@gmx.de" date="1353326400">- update to 2.1.6
  * pt-online-schema-change: Columns can now be renamed without data loss
  * pt-online-schema-change: New --default-engine option
  * pt-stalk: Plugin hooks available through the --plugin option to extend the tool's functionality
- fixing the following bugs
  * --version-check default should be explicitly "off"
  * LOAD DATA LOCAL INFILE broken in some platforms
  * Useless use of cat in Daemon.pm
  * Tools exit 0 on error parsing options, should exit non-zero
  * pt-table-checksum doesn't warn if binlog_format=row or mixed on slaves
  * pt-table-checksum breaks replication if a slave table is missing or different
  * pt-table-checksum doesn't honor --run-time while checking replication lag
  * pt-table-checksum error: Use of uninitialized value in int at line 2778
  * pt-table-checksum can crash with --columns if none match
  * pt-table-checksum dies if creating the --replicate table fails
  * pt-table-checksum doesn't test all hash functions
  * pt-table-checksum 2.1.4 doesn't detect diffs on Percona XtraDB Cluster nodes
  * pt-deadlock-logger can't parse db/tbl/index on partitioned tables
  * pt-online-schema-change DELETE trigger fails when altering primary key
  * pt-online-schema-change fails if sql_mode explicitly or implicitly uses ANSI_QUOTES
  * pt-online-schema-change fails with "I need a max_rows argument"
  * pt-online-schema-change --quiet doesn't disable --progress
  * pt-online-schema-change doesn't report how many warnings it suppressed
  * pt-upgrade fails if select column &gt; 64 chars
  * pt-mysql-summary may report the wrong cnf file
  * pt-mysql-summary incorrectly categorizes databases
  * pt-show-grant doesn't support column-level grants
  * pt-query-digest review table privilege checks don't work
  * pt-query-digest docs for event attributes link to defunct Maatkit wiki
  * pt-duplicate-key-checker fails when it encounters a crashed table
  * pt-stalk deletes non-empty files
  * pt-stalk --no-stalk and --iterations 1 don't wait for the collect
  * pt-fifo-split is processing n-1 rows initially
  * pt-find documentation error with mtime and InnoDB
  * pt-trend output has no header
  * pt-visual-explain docs link to missing pdf
  * pt-fk-error-logger crashes if there's no foreign key error
  * pt-fk-error-logger --dest table example doesn't work</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357905600">- update to 2.1.8
  * Beta support for MySQL 5.6
  * Beta support for Percona XtraDB Cluster
  * pt-online-schema-change: If ran on Percona XtraDB Cluster, requires PXC 5.5.28 or newer
  * pt-table-checksum: If ran on Percona XtraDB Cluster, requires PXC 5.5.28 or newer
  * pt-upgrade: Added --[no]disable-query-cache
- fixing the following bugs:
  * Bad pod2rst transformation
  * Bad online docs formatting for --[no]vars
  * pt-config-diff is case-sensitive
  * pt-config-diff doesn't handle end-of-line comments
  * pt-config-diff Use of uninitialized value in substitution (s///) at line 1996
  * pt-deadlock-logger doesn't handle usernames with dashes
  * pt-heartbeat handles timezones inconsistently
  * pt-kill --log-dsn timestamp is wrong
  * pt-mysql-summary doesn't handle renamed variables in Percona Server 5.5
  * pt-online-schema-change checks for foreign keys on MyISAM tables
  * pt-query-advisor hangs on big queries
  * pt-query-advisor RES.001 is incorrect
  * pt-query-advisor false positive on RES.001
  * pt-query-advisor issues wrong RES.001
  * pt-query-digest fails to parse timestamp with no query
  * pt-query-digest doesn't parse general log with "Connect user as user"
  * pt-query-digest with custom --group-by throws error
  * pt-query-digest prints negative byte offset
  * pt-query-digest help output mangled
  * pt-slave-restart CHANGE MASTER query causes error
  * pt-stalk purge_samples slows down checks
  * pt-stalk does not report NFS iostat
  * pt-table-checksum doesn't ignore tables for --replicate-check-only
  * pt-table-checksum v2 fails when --resume + --ignore-database is used
  * pt-table-checksum debug statement for "Chosen hash func" prints undef
  * pt-table-checksum Illegal division by zero at line 7950
  * pt-table-checksum uninitialized value in numeric lt (&lt;) at line 8611
  * Tools let --set-vars clobber the required SQL mode
- also contains fixes from 2.1.7:
  * pt-table-checksum 2.1.6 crashes using PTDEBUG
  * pt-table-checksum 2.1.6 --check-binlog-format doesn't ignore PXC nodes</changelog>
<changelog author="andreas.stieger@gmx.de" date="1362312000">- update to 2.1.9 [bnc#804102], fixing the following bugs:
  * pt-heartbeat 2.1.8 doesn't use precision/sub-second timestamps
  * pt-heartbeat 2.1.8 reports big time drift with UTC_TIMESTAMP
  * pt-online-schema-change fails with "Duplicate entry" on MariaDB
  * pt-online-schema-change makes bad DELETE trigger if PK is re-created with new columns
  * pt-pmp doesn't list the origin lib for each function
  * pt-query-digest shouldn't print "Error: none" for tcpdump
  * pt-query-digest fails to parse non-SQL errors
  * pt-table-checksum: Confusing error message with binlog_format ROW or MIXED on slave
  * pt-table-sync false-positive error "Cannot nibble table because MySQL chose no index
    instead of the PRIMARY index"
  * pt-stalk is too verbose, fills up log</changelog>

</package>
<package pkgid="017d446f8f50f2d846ce9f49e3c91a7c381007cb34c0c71094ef3ff042716a03" name="sssd" arch="src">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="f3bd4a34779c01eae4de05ff97bafa11f437dd282e6055251011e3b78ce12139" name="systemtap" arch="src">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="d1ccb8d789dac27ef4e04ea7494b0e4f3a90f23c7ecfee1d456143a72c9f1ab9" name="systemtap-docs" arch="src">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tiwai@suse.de" date="1242820800">- split docs and examples to docs subpackage and generate from its
  own spec file to cut off the dependency loop</changelog>
<changelog author="tiwai@suse.de" date="1242993600">- add missing examples installation in docs subpackage</changelog>
<changelog author="tiwai@suse.de" date="1245153600">- updated to version 0.9.8:
  * Module signing support
  * Debuginfo suggestions when a script fails
  * Using %M in print formats for hex dumps can now print entire
    buffers
  * Dwarfless syscalls: The nd_syscalls tapset is now available to
    probe system calls without requiring kernel debug info.
  * sid() returns the session ID of the current process
  * stringat() indexes a single character from a string.
  * New script examples</changelog>
<changelog author="tiwai@suse.de" date="1245326400">- change to noarch</changelog>
<changelog author="tiwai@suse.de" date="1248177600">- corrected to use libexecdir
- fix summary and description</changelog>
<changelog author="tonyj@suse.de" date="1254484800">- updated to version 1.0.  See systemtap.changes for full changelog.</changelog>
<changelog author="tonyj@novell.com" date="1259755200">- Minor changes to spec file</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1. See systemtap.changes for full changelog.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update to version 1.3</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4. See systemtap.changes for full changelog.</changelog>
<changelog author="jslaby@suse.de" date="1305633600">- fix gcc 4.6 build</changelog>
<changelog author="coolo@novell.com" date="1307448000">- fix file dependencies of examples and testsuite</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6</changelog>
<changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1327838400">- add automake too</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Update to version 1.7.  See systemtap.spec for changelog</changelog>
<changelog author="dimstar@opensuse.org" date="1339675200">- Add systemtap-automake112.patch: Fix build with automake 1.12:
  + Support for automatic de-ANSI-fication has been removed.
  + Patch taken from upstream, git commit id 5b2bc70.</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="tonyj@suse.com" date="1357992000">- Update to version 2.0. See systemtap.spec for changelog</changelog>

</package>
<package pkgid="2c2c8638cca1fc0dc0b29b1831835426a9462562aa42676bdb872359cc67f176" name="timezone" arch="src">
    <version epoch="0" ver="2013a" rel="2.5.1"/>

<changelog author="dmueller@suse.de" date="1315915200">- update to 2011j:
  * Fix past timezones for Kenya, Uganda, and Tanzani
  * Samoa uses DST in 2011-2012 starting on September 24th 3am</changelog>
<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>

</package>
<package pkgid="d5baeb3c577d471e7371d264e3441916ae984c14daf102e6b0b3f298b5bd3857" name="timezone-java" arch="src">
    <version epoch="0" ver="2013a" rel="2.5.1"/>

<changelog author="dmueller@suse.de" date="1315915200">- update to 2011j:
  * Fix past timezones for Kenya, Uganda, and Tanzani
  * Samoa uses DST in 2011-2012 starting on September 24th 3am</changelog>
<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>

</package>
<package pkgid="b3fe25a156b6c24f53ecd7a22e98b9981e01ceb9c30ceb82d13c03e7030eff2e" name="release-notes-openSUSE" arch="src">
    <version epoch="0" ver="12.3.6" rel="1.6.1"/>

<changelog author="ke@suse.de" date="1319716800">- 12.1.3:
  * Enhance GNOME 3 snippet (bnc#725805); Initializing Graphics with KMS
  (Kernel Mode Setting).
  * New entries: CUPS 1.5 (bnc#726178), System Shutdown with systemd
  (bnc#726387).
  * Ship 505 or better translated languages.</changelog>
<changelog author="ke@suse.de" date="1319803200">12.1.4:
  * New entries: systemd: Supplying Service Start-up Parameters
  (bnc#725942).
  * Enhance GNOME 3 snippet (fallback mode, bnc#727039).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1320408000">- 12.1.5:
  * New entry: Booting with systemd or sysvinit (bnc#727092).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1320667200">- 12.1.6:
  * New entry: NetworkManager Command Line Interface (bnc#727537).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1320840000">- 12.1.7:
  * New entries: rpm: %_topdir Changed for Non-root Users (bnc#728841),
  Windows Domain Membership Logon with KDM (bnc#721782), Radeon HDMI
  Sound Output Being Disabled (bnc#729194).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1322222400">- 12.1.8:
  * Update translations (bnc#729717).</changelog>
<changelog author="ke@suse.de" date="1326974400">- 12.2.0:
  * Start resetting for 12.2.</changelog>
<changelog author="ke@suse.de" date="1339761600">- 12.2.1:
  * mount/losetup without cryptoloop.</changelog>
<changelog author="ke@suse.de" date="1341489600">- 12.2.2:
  * Provide txt (UTF-8 encoded) instead of rtf for yast (ncurses).
  * Use official stypesheets to produce HTML (and txt via w3m).
  * Use UTF-8 for HTML output encoding.
  * Link html to rtf for the graphical yast.
  * New entries: sysvinit Deprecated (bnc#769570).
  * Changed entries: Booting with Deprecated sysvinit (bnc#727092 and
  bnc#769570).</changelog>
<changelog author="ke@suse.de" date="1342008000">- 12.2.3:
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1343390400">- 12.2.4:
  * Ensure that the dumped txt files are UTF-8 encoded; bnc#772798.
  * Update translations.
  * Add PDF target.</changelog>
<changelog author="ke@suse.de" date="1343908800">- Build and install PDF files.</changelog>
<changelog author="ke@suse.de" date="1345550400">- 12.2.6:
  * Update translations.
  * Timezone Information in /etc/adjtime; bnc#774716.
  * Remove most of the "checkit" markers (systemd).</changelog>
<changelog author="ke@suse.de" date="1347364800">- 12.3.0:
  * Start resetting for 12.3 and add CHECKIT markers.</changelog>
<changelog author="ke@suse.de" date="1359633600">- 12.3.1:
  * Fix encoding while building .txt from .html using w3m (add -I UTF-8);
  bnc#784291.
  * New entries: SYSLOG_DAEMON Variable Removed (bnc#790805); Configuring
  Postfix (bnc#796161).
  * Changed entries: Initializing Graphics with KMS (Kernel Mode Setting)
  (add grub2; bnc#781700); Cleaning Directories (/tmp and /var/tmp).
  * Removed entries: Booting with Deprecated sysvinit; sysvinit Deprecated.</changelog>
<changelog author="ke@suse.de" date="1360843200">- 12.3.2:
  * Comment remainint entries marked with CHECKIT.</changelog>
<changelog author="ke@suse.de" date="1361448000">- 12.3.3:
  * New entries: UEFI update.
  * Minor changes (bnc#804301; bnc#804315).</changelog>
<changelog author="ke@suse.de" date="1361966400">- 12.3.4:
  * New entries: Gnome: Workaround to Set Shift or Ctrl+Shift as a
  Shortcut (bnc#804773).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1363176000">- 12.3.5 (bnc#808614):
  * New entries: Crypted LVM in UEFI Mode Needs /boot Partition
  (bnc#808104); Enable Secure Boot in YaST Not Enabled by Default When
  in Secure Boot Mode (bnc#808108); No Network after Installation
  (bnc#808111); Wrong Bootloader When Installing from a Live Medium in a
  UEFI Environment (bnc#808116); openSUSE 12.3 Medium May Not Boot on
  Future Secure Boot Enabled Hardware (bnc#808595).
  * Update entries: Gnome: Workaround to Set Shift or Ctrl+Shift as a
  Shortcut (bnc#804773).</changelog>
<changelog author="ke@suse.de" date="1363176000">- 12.3.6:
  * For the moment, disable 'ar' (pdf does not build).</changelog>

</package>
<package pkgid="3c9683d754009ae93ace5eae770f2c22c8b058e78b5c8b225de135e50776543a" name="timezone" arch="src">
    <version epoch="0" ver="2013b" rel="2.9.1"/>

<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- tzcode and tzdata 2013b
  * Haiti uses US daylight-saving rules this year, and presumably future years.
    This changes time stamps starting today.
  * Paraguay will end DST on March 24 this year.
  * Morocco does not observe DST during Ramadan.</changelog>

</package>
<package pkgid="e55d586567cbdeaf9b6d46286ebd2a144e76970299c73ce491426bdc0976872f" name="timezone-java" arch="src">
    <version epoch="0" ver="2013b" rel="2.9.1"/>

<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- tzcode and tzdata 2013b
  * Haiti uses US daylight-saving rules this year, and presumably future years.
    This changes time stamps starting today.
  * Paraguay will end DST on March 24 this year.
  * Morocco does not observe DST during Ramadan.</changelog>

</package>
<package pkgid="197ad0e29d14823b4b523568a90b12b26e556c86da518e9153c032812662bf59" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="967be576d384f4a40387921dc72539cb573843874e0755da0f62c2600a165f7f" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="f966b8cf94110d8f561dc53dc5cc1d9c83fd281357cbca3a4b145627eddc0065" name="seamonkey" arch="src">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="dd9bc7d64b294caf534d419ff514e75e4ebcae00b7ff17863c717732d60c692c" name="xulrunner" arch="src">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="2da1891b06b9f7f28d32623f3d8d448aa95aed662079129d4644da5e547cc56a" name="libewf" arch="src">
    <version epoch="0" ver="0.0.0+20120813" rel="2.4.1"/>

<changelog author="toganm@opensuse.org" date="1284465600">- Initial opensuse build service checkin</changelog>
<changelog author="toganm@opensuse.org" date="1315137600">- Reworked spec based on fedora package
- TODO
  +enable disktype for requires</changelog>
<changelog author="cfarrell@suse.com" date="1328529600">- license update: LGPL-3.0+
  No indication that LGPL-3.0 is the license (i.e. only). Looks like
  LGPL-3.0+</changelog>
<changelog author="saschpe@suse.de" date="1328702400">- Spec file cleanup:
  * Provide sane versioning, this will break updates in the 'security'
    project now, but this is better than breaking Factory updates later.
  * Don't "rm -rf %buildroot" in the %install section
  * Use upstream tarballs
  * Cleanup BuildRequires</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346846400">- upgrade to libewf-20120813
  * Bug fixes and multiple enhancements
  * soname update from 1 to 2
  * see ChangeLog
- remove pyver patch, now upstream
- add remove_date_time_macros.patch to keep builds consistent
- add zlib as requires as per sample specfile in tarball
- Add SLES build support</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346932800">- change license to GPL-3.0+ until upstream resolves LGPL-3.0+ status (BNC# 778993)
- run spec-cleaner
- make soname a define
- remove requires libewf from ewftools sub-package</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1362830400">- fix for ewfmount (bnc#808550)
  * fails with the error msg:  No sub system to mount EWF format.
  * added BuildRequires: fuse-devel
  * added Recommends: fuse   (ewfmount is not core functionality of this package)</changelog>

</package>
<package pkgid="addd594ce08293fc6e060c7b8aa889a8f543b5d08df9893bda3adecbdd95013d" name="rpmrebuild" arch="src">
    <version epoch="0" ver="2.9" rel="7.4.1"/>

<changelog author="hvogel@suse.de" date="1197374400">- Initial Package, Version 2.2.0</changelog>
<changelog author="hvogel@suse.de" date="1207224000">- Update to version 2.2.1
  * fix bug on uid/gid with --pug-from-fs option
  * demo plugin : better error message
  * do not remove /etc/popt : it does not belong our package
  * add new set_tag plugin
  * new demofiles plugin</changelog>
<changelog author="hvogel@suse.de" date="1220875200">- Update to version 2.2.3
  * fix a problem with new rpm security
  * fix a bug when working on package file with path</changelog>
<changelog author="hvogel@suse.de" date="1249473600">- Update to version 2.3
  o fix installation test when repackaged rpm file (with -p)
  o fix for rpm 4.6 that ignore BuildRoot in the spec file flag
  o do not use popt any more</changelog>
<changelog author="hvogel@novell.com" date="1270555200">- Update to version 2.4
  o add -l / --list-plugin option
  o add -5 / --md5-compat-digest option</changelog>
<changelog author="bruno@ioda-net.ch" date="1318507200">- Update to version 2.6
- spec cleaner
- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build-</changelog>
<changelog author="lazy.kent@opensuse.org" date="1363089600">- Update to 2.9.
  * Fix to work with rpm 4.10 - error: incorrect format: invalid
    field width.
- Changes in 2.8.
  * Can handle SUGGESTS/ENHANCES rpm tag.
  * Add --cap-from-fs/cap-from-db options.
- Changes in 2.7.
  * Patch from Andreas Kainz for package file checking.
  * Add new unset_tag plugin.
  * Fix -l / --list-plugin option.
  * Add support of posix capability.
  * Add new un_prelink plugin.
  * Add RPMREBUILD_OPTS environment variable.
  * Fix problem with different architecture (build 32bit on
    64bits).
  * Fix bad arch on gpg-pubkey packages.
- Use full URL as a source.
- Verify GPG signature.
- Package docs.
- Mark man pages as doc.</changelog>

</package>
<package pkgid="14e038647ca186ae1a1f879002f35a2da6ce6646fedd2f8222ec4aa8acf9289d" name="yast2-security" arch="src">
    <version epoch="0" ver="2.23.5" rel="1.4.1"/>

<changelog author="jsuchome@suse.cz" date="1302004800">- added support for SHA-2 based crypto methods (fate309705)
- 2.21.0</changelog>
<changelog author="jsuchome@suse.cz" date="1311163200">- remove blowfish hash from selections (fate#312321)
- 2.21.1</changelog>
<changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
<changelog author="jsuchome@suse.cz" date="1315483200">- sysctl settings now in /etc/sysctl.conf (bnc#714405)
- 2.21.2</changelog>
<changelog author="jsuchome@suse.cz" date="1316174400">- added option to tune system hibernation rights (bnc#704997)
- 2.21.3</changelog>
<changelog author="jsuchome@suse.cz" date="1316433600">- fixed testsuite
- 2.21.4</changelog>
<changelog author="visnov@suse.cz" date="1317038400">- set dialog title
- 2.21.5</changelog>
<changelog author="jsuchome@suse.cz" date="1318248000">- include etc_polkit-default-privs_local.scr in rpm
- 2.21.6</changelog>
<changelog author="jsuchome@suse.cz" date="1327492800">- confirmed license
- 2.22.0</changelog>
<changelog author="jsuchome@suse.cz" date="1328011200">- use sha512 as default encryption value, not 'des' (bnc#743715)
- 2.22.1</changelog>
<changelog author="jsuchome@suse.cz" date="1329739200">- corectly read/write ctrl-alt-delete behavior when systemd is used
  (bnc#742783)
- 2.22.2</changelog>
<changelog author="jsuchome@suse.cz" date="1332763200">- testsuite adapted to changes in FileUtils.ycp
- 2.22.3</changelog>
<changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts
- 2.22.4</changelog>
<changelog author="jsuchome@suse.cz" date="1333368000">- testsuite: explicitely set the output of target.stat
- 2.22.5</changelog>
<changelog author="jsuchome@suse.cz" date="1351080000">- remove SuSEconfig calls (fate#100011)
- 2.23.0</changelog>
<changelog author="jsuchome@suse.cz" date="1359979200">- testsuite adapted to last changes (SuSEconfig removal)
- 2.23.1</changelog>
<changelog author="jsuchome@suse.cz" date="1360152000">- /etc/default/useradd is dropped (bnc#802006)
- adapted to changes of /etc/login.defs (bnc#802006)
- 2.23.2</changelog>
<changelog author="jsuchome@suse.cz" date="1362571200">- added missing etc_polkit-default-privs_local.scr
- 2.23.3</changelog>
<changelog author="jsuchome@suse.cz" date="1362657600">- drop unused LASTLOG_ENAB support (bnc#807099)
- drop obsoleted GROUP_ENCRYPTION (bnc#802006)
- if key is not present in config file, do not write new value
  (bnc#807099)
- 2.23.4</changelog>
<changelog author="jsuchome@suse.cz" date="1362744000">- remove broken LASTLOG_ENAB entry from /etc/login.defs (bnc#807099)
- 2.23.5</changelog>

</package>
<package pkgid="888b2834cd11778bce905ae494e311367f3bffb93202d42722164b5554c6ccf9" name="gnome-control-center" arch="src">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="a42155d3dc9bff2c2f0b197362544aab0d837d954ef3114dc56dee1f68c8a65d" name="gnome-control-center-branding-openSUSE" arch="src">
    <version epoch="0" ver="12.2" rel="4.4.1"/>

<changelog author="vuntz@opensuse.org" date="1318334400">- Initial package, to provide a YaST item in the control center
  shell.</changelog>
<changelog author="vuntz@opensuse.org" date="1318507200">- Remove %{release} from the gnome-control-center versioned
  Requires, to not have to rebuild this package each time
  gnome-control-center rebuilds to keep it installable.</changelog>
<changelog author="vuntz@opensuse.org" date="1337774400">- Bump version to 12.2, to prepare for next version of openSUSE.</changelog>

</package>
<package pkgid="161e087c9e0806ec497a755418bf404e6819c80dc6ab72d9e7de3fd00c5e84be" name="gnome-settings-daemon" arch="src">
    <version epoch="0" ver="3.6.3" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1337083200">- Update to version 3.4.2:
  + General:
  - Fix memory leaks
  + Media-keys:
  - Fix applications launching through keyboard shortcuts not
    using the session's ssh agent, or keyrings
  + Mouse:
  - Fix arguments passed to the custom command
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Add gnome-settings-daemon-reduce-tap-delay.patch to reduce the
  delay between the last keystroke and the first touchpad tap when
  the option "Disable touchpad when typing" is enabled in mouse
  options in gnome-control-center (bgo#590783)
- Add gnome-settings-daemon-only-inhibit-touchpad-tapping.patch to
  inhibit only tapping and not affect pointer motion or scrolling
  using the touchpad when the option "Disable touchpad when
  typing" is enabled in mouse options in gnome-control-center
  (bgo#673055)
- Pass --libexecdir option to ./configure to change the
  installation dir of program executables to
  %{_libexecdir}/gnome-settings-daemon-3.0; fixes bnc#758592.</changelog>
<changelog author="dimstar@opensuse.org" date="1339243200">- Update to version 3.5.2:
  + Remove ability to D-Bus activate
  + Media keys:
  - Get proper gnome-keyring environment
  - Simplify the OSD code
  - Add keybindings to switch input sources
  + Mouse:
  - Fix applying settings to newly added touchpads
  - Reduce default touchpad deactivation to 1s
  + Housekeeping:
  - Split out 'ignore unix mount' code
  + Keyboard:
  - Always apply xmodmap
  - Lots of cleanups
  - Apply XKB layouts ourselfs and stop relying on libgnomekbd
  + Power:
  - Disconnect from upower signals when needed
  - Add org.gnome.settings-daemon.plugins.power.lid-close-
    suspend-with-extrnal-monitors
    key to allow forcing suspend on lid close
  + Print:
  - Fix setting of default media size
  - Don't create an unused proxy object
  - Speed up initialization
  + Updates:
  - Automatically download updates rather than installing them
  + Wacom:
  - Disable wacom support on s390
  - Disable wacom support on non-linux
  - Don't put touchscreens in relative mode
  - Make tablet configuration per-machine
  + Color:
  - Be quiet about unloadable profiles
  + Updated translations.
- Drop pkgconfig(libxklavier), pkgconfig(libgnomekbd) and
  pkgconfig(libgnomekbdui) BuildRequires.
- Add pkgconfig(xkbfile) BuildRequires: add upstream after
  libgnomekbd dependency got dropped.
- Drop gnome-settings-daemon-reduce-tap-delay.patch: fixed upstream
- Rebase gnome-settings-daemon-bnc462640-mute-action.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1340625600">- Update to version 3.5.3:
  + Housekeeping:
  - Support new XDG thumbnail directory locations
  + Keyboard A11y:
  - Don't crash when changing large print in fallback mode
  - Link to an existing help page
  + Keyboard:
  - Don't crash if LANG is empty
  + Media-keys:
  - Make &lt;Super&gt; keyboard shortcuts work again
  - Use systemd to shutdown or suspend if available
  + Mouse:
  - Only inhibits mouse clicks and scrolls with syndaemon
  + Power:
  - End the lid-close safety timer when the lid gets opened
  - Update fallback status icon on icon state change
  - Don't leak notifications
  - Avoid duplicate translations
  - Use systemd to shutdown or suspend if available
  - Don't enable backlight helper if GUdev is not available
  + Updates:
  - Adapt to new upstream property name
  - Add a notification for offline updates
  + Wacom:
  - Update display mapping on monitor changes
  - Flag unknown devices created from fallback
  - Add keep aspect ratio option
  - Use GnomeRROutput instead of GnomeRROutputInfo
  - Match built-in monitor
  + XRandr:
  - Explicitly set clone state variable when generating monitor
    configs.
- Drop gnome-settings-daemon-only-inhibit-touchpad-tapping.patch:
  fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 3.5.4:
  + Printers:
  - Don't block the session with unreachable printers
  + Wacom:
  - Fix crasher related to screen matching</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 3.5.5:
  + Add test applications for a number of plugins
  + Color:
  - Fix notification-related memory leaks
  + Housekeeping:
  - Fix notification-related memory leaks
  + Keyboard:
  - Add support for switching to IBus input methods
  + Updates:
  - Remove unused settings
  - Remove a number of unused notifications
  - Don't ever live-update packages in the session
  - Fix a number of memory leaks
  - Prevent crash if a device that requires a firmware is removed
    before the firmware search completes
  + Wacom:
  - Fix crasher related to screen tablets
  - Do not rotate "pad" devices
  - Apply display rotation to device that's mapped to it
  - Make shortcuts that require Shift work as expected
  - Re-apply calibration and aspect-ratio when the screen changes
    but don't apply it to touch devices.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Build:
  - Add optional man page.
  - List plugin schemas as children of the main schema.
  + Keyboard:
  - Require ibus 1.4.99 for ibus support.
  + Mouse:
  - If one device was ignored, we would ignore all the devices.
  + Smartcard:
  - Don't try to use smartcard drivers that didn't load.
  + Updates:
  - Remove unused code.
  - Avoid compilation warnings due to PackageKit API changes.
  + Wacom:
  - Avoid a warning at login.
- Add xsltproc BuildRequires: needed to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Keyboard:
  - Apply XKB options
  + Mouse:
  - Add support for natural scroll for touchpads
  + Power:
  - Fix D-Bus path of the screensaver
  + Wacom:
  - Implement the "switch monitor" combination
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Keyboard:
  - Don't handle IBus for fallback, it will use the same UI it
    always did.
  - Hook IBus support for legacy applications.
  + Mouse:
  - Fix natural-scroll not working until switched off and on
    again.
  + Power:
  - Do not attempt to change the brightness of an output that was
    disabled.
  - Fix idle blank and sleep timeout.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Add explicit pkgconfig(libpulse-mainloop-glib) BuildRequires:
  we forgot to add it when adding pkgconfig(libpulse).
- Add pkgconfig(xext) BuildRequires: new explicit dependency in
  3.5.5 for the power plugin that needs the XSync API.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Drop gnome-settings-daemon-bnc461755-randr-rotate-wacom.diff:
  this needed to be rebased for a long time, and there's a rocking
  support for wacom tablets upstream now. So this is most likely
  not needed anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Keyboard:
  - Don't block getting the IBus global engine.
  - Don't touch the XKB layout if no input sources were
    configured.
  - Fix gtk+ IM module getting set to IBus for XKB sources.
  + Media keys:
  - Make "toggle brightness" work.
  + Color:
  - Don't warn about non-existent DMI file.
  + Power:
  - Fix some instances where an external screen would turn off.
  + Wacom:
  - Require wacom 0.6 to fix bugs with some tablets.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Create sources from the X layouts if the configuration is empty
  + Always do that in GDM, so system-wide layouts work
  + Add modifiers-only shortcuts to switch input sources.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349870400">- Update to version 3.6.1:
  + Color:
  - Fix possible crashers on exit
  + Keyboard:
  - Allow grabbing the Menu key
  - Apply XKB variants and options for each IBus engine
  - Don't setup legacy toolkits if IBus is missing
  - Add default setup for some particular languages
  - Convert old libgnomekbd and IBus configurations
  - Add support for more modifiers only combinations
  - Fix input switching eating the modifiers keys in some cases
  + Mouse:
  - Fix "Locate Pointer" eating the Ctrl key
  - Fix "Locate Pointer" animation showing when the Ctrl key has
    been used
  + Updates:
  - Never show the user a message about cancelled transactions
  + Wacom:
  - Fix LEDs switching for some tablet models
  + Housekeeping:
  - Fix possible crashers on exit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352376000">- Update to version 3.6.2:
  + Make test applications work when libnotify was used.
  + Keyboard:
  - Add default ibus engine for Indic locales.
  - Prevent 100% CPU usage related to remembering Num-Lock state.
  - Don't print warning messages when resuming from suspend.
  + Power:
  - Fix screen dimming and power saving even when inhibited.
  - Don't suspend, dim or blank when running in virtual machines.
  - Fix warning output in the Brightness &amp; Lock panel.
  - Fix possible crash when the backlight fails to be turned off
    for example.
  + Sound:
  - Fix alert sound changes requiring a log out/login to apply.
  + Updates:
  - Don't require the user to click OK to clear the message for
    successful offline updates.
  + Wacom:
  - Fix touchstrips and touchrings without a modeswitch.
  + XSettings:
  - Make startup smoother by batching settings updates together.
- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Keyboard: Add keyboard shortcuts including CapsLock to switch
    input sources..
  + Mouse: Fix horizontal natural scrolling.
  + Power: Fix a warning on startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1358078400">- Add gnome-settings-daemon-notify-idle-resumed.patch, notify user
  about auto suspend when returning from sleep (bnc#708182).</changelog>
<changelog author="dimstar@opensuse.org" date="1358683200">- Add gnome-settings-daemon-double-suspend.patch: Fix double
  suspend: if GNOME is configured to suspend on lid close, the
  system goes directly back in sleep upon a wakeup call. Only the
  2nd wake up is successful and persistent. This issue comes from
  systemd and gnome both executing suspend.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add gnome-settings-daemon-restore-datetime-plugin.patch: needed
  for gnome-control-center to properly toggle NTP given that
  timedated is broken on openSUSE; needed until the corresponding
  gnome-control-center patch is removed (bnc#796055).</changelog>

</package>
<package pkgid="ca593e8f84a71d75c983c0a538177c08990616a15ff9a037799581cc94d01a3d" name="nagios-nsca" arch="src">
    <version epoch="0" ver="2.9.1" rel="5.4.1"/>

<changelog author="stark@suse.de" date="1044446400">- update to 2.3
  * Minor changes to daemon init code
  * Minor Makefile fixes</changelog>
<changelog author="stark@suse.de" date="1056024000">- added nagios to neededforbuild (fixing directory ownership)</changelog>
<changelog author="stark@suse.de" date="1059048000">- update to 2.4
  * Better support for u_int32_t detection
  * Minor bug fixes</changelog>
<changelog author="adrian@suse.de" date="1073822400">- add %defattr</changelog>
<changelog author="stark@suse.de" date="1129118400">- fixed uninitialized variable and missing return-codes</changelog>
<changelog author="stark@suse.de" date="1137931200">- update to version 2.5
- added init-script
- added xinetd configuration
- use -fstack-protector
- use tcp-wrapper</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="stark@suse.de" date="1138881600">- fixed crash while encrypt_cleanup()</changelog>
<changelog author="olh@suse.de" date="1160481600">- fix send_nsca  segfault with -c and -d options</changelog>
<changelog author="tsieden@suse.de" date="1164974400">- update to version 2.6
  * spec file fix
  * segfault fix in encryption library cleanup
  * daemon now exits with an error if it can't drop privileges
  * added chroot support (Sean Finney)
  * added support for writing a PID file
  * added support for reloading config files with SIGHUP
  * removed obsolete patches which are included in upstream now
- fix NscaBin location in init script</changelog>
<changelog author="tsieden@suse.de" date="1165492800">- package split: nagios-nsca for the server and
  nagios-nsca-client for the remote host
- removed unneeded BuildRequires (nagios)</changelog>
<changelog author="tsieden@suse.de" date="1170072000">- update to version 2.7
  * Fixed crash from malformed command line
    (therefore removed removed nagios-nsca.send_nsca.formatstring.patch)
  * Updated to config.sub and config.guess to latest from GNU Savannah
  * changed default user and group to nagios nagios (#236135)</changelog>
<changelog author="tsieden@suse.de" date="1171022400">- update to version 2.7.1
  * Fixed bug that prevented single mode daemon from working properly
  * Added sample scripts for testing functionality to nsca_tests/
    (Ton Voon/Altinity)</changelog>
<changelog author="tsieden@suse.de" date="1187006400">- update to version 2.7.2
  * fixed bug with NSCA daemon eating CPU if child process
  couldn't accept a connection in multi-process mode (Chris Wilson)</changelog>
<changelog author="tsieden@suse.de" date="1188561600">- cleanup spec file (removed unneeded %dir entry)</changelog>
<changelog author="schneemann@b1-systems.de" date="1320926400">- update to version 2.9
  * Add config directive to submit directly to checkresults directory (Mike Lindsey)
  * Support multi-line check output with 4000 character limit (Mike Lindsey)
- fixes in skipped version 2.8
  * Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki)
  * Fixed bug where daemon would segfault if mcrypt library was not initialized before timeout (Holger Weiss)
  * Fixed bug with switching from dump file to command file when running under single mode (Ton Voon)
  * Fix for small memory leak with running as a single process daemon (Daniel)</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="lars@linux-schulserver.de" date="1328270400">- update to 2.9.1:
  + Applied patch to allow packets arriving with a future time stamp
    (Daniel Wittenberg)
  + Updated server (nsca) to allow packets with older, smaller
    packet size (Eric Stanley)
- use macros from nagios-rpm-macros package
- added rpmlintrc</changelog>
<changelog author="lars@linux-schulserver.de" date="1349956800">- recommend 'monitoring_daemon' to allow nsca to run with
  compatible monitoring solutions</changelog>
<changelog author="lars@linux-schulserver.de" date="1363262400">- added man pages for nsca and send_nsca (fixes bnc#804614)</changelog>

</package>
<package pkgid="a095f5af9354ca56314b101a213dd755dc1d49eda0068b172eda7af65a512550" name="kdebase4-openSUSE" arch="src">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="cb1b0eb6100e2fd94bd68eecf289db8368952f2a83f83e2fb6a6670ea903a7d7" name="open-iscsi" arch="src">
    <version epoch="0" ver="2.0.870" rel="47.4.1"/>

<changelog author="hare@suse.de" date="1207828800">- Tear down device stack before logging out (bnc#378141)</changelog>
<changelog author="hare@suse.de" date="1208260800">- Synchronize with SLES10 SP2</changelog>
<changelog author="hare@suse.de" date="1208779200">- Scan memory area for iBFT correctly (bnc#378837)</changelog>
<changelog author="hare@suse.de" date="1209470400">- Pull in fixes from upstream git repository</changelog>
<changelog author="hare@suse.de" date="1216900800">- Update to 2.0-870-rc1
  * Fix login redirection
  * Fix NOP timeout handling
  * Various small bugfixes
- Include mkinitrd scriptlets.</changelog>
<changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
<changelog author="hare@suse.de" date="1220443200">- Pull in fixes from upstream git repository
- Call mkinitrd_setup during %post and %postun (bnc#413709)</changelog>
<changelog author="hare@suse.de" date="1226491200">- Update SUSE init scripts to work with newer kernels
- Move mkinitrd scriptlets to git repository
- Fixes for root-on-iSCSI:
  * Update mkinitrd scripts to work with newer kernels (bnc#435215)
  * Allow 'onboot' for iscsiadm -L
  * Add option to not write a pid file
- Update login retry mechanism to work around the spanning-tree
  issue (bnc#433363)</changelog>
<changelog author="hare@suse.de" date="1226577600">- Update iscsi-gen-initiatorname to work with newer kernels
  (bnc#443509)</changelog>
<changelog author="hare@suse.de" date="1227182400">- Add cxgb3i support (bnc#433500, FATE#304154)
- No pid file from init scripts</changelog>
<changelog author="hare@suse.de" date="1228219200">- iscsiadm -m fw crashes on ppc (bnc#449116)</changelog>
<changelog author="hare@suse.de" date="1228478400">- Fixup 'onboot' for loginall (bnc#449108)
- Remove unused 'dump_char' definition in log.c
- Load ibft module before reading /sys/firmware (bnc#450897)</changelog>
<changelog author="hare@suse.de" date="1228737600">- Remove trailing tilde from /etc/iscsi/ifaces.example (bnc#450870)</changelog>
<changelog author="ro@suse.de" date="1232971200">- change fillup call from "-Y" to "-y" the boot script has
  been present in this package for long enough (SLES10-GA)</changelog>
<changelog author="crrodriguez@suse.de" date="1245585600">- build with fno-strict-aliasing
- do not use static libc, this does not work in reality, use
  of getaddrinfo(3) requires shared libraries at runtime</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="mmarek@suse.cz" date="1268395200">- Do not hardcode the iscsi_ibft module in the iscsi mkinitrd
  script, the ibft script handles this correctly (bnc#528657).</changelog>
<changelog author="aj@suse.de" date="1307361600">- Fix build with newer glibc.</changelog>
<changelog author="aj@suse.de" date="1319716800">- Rename init scripts (bnc#661401).</changelog>
<changelog author="lduncan@suse.com" date="1363262400">- Add open-iscsi-support-non-root-boot-volume.patch: handle non-
  root boot-time iscsi volumes (bnc#630434)
- Add open-iscsi-fix-sysfs-get-value-null.patch: accept "(null)"
  password as meaning no password, when using sysfs (bnc#766300)</changelog>

</package>
<package pkgid="7c42579c6248d85ddae4f3ed4fec621108abe07077acf100798ede32c5d6a1ae" name="pulseaudio" arch="src">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="716f41a7f28b3c74a1da377cd12d11acf28d72f9cdc54422d509090d30418203" name="firebird" arch="src">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="ecdb1b20862c9a6eb8400499555b27357f1c906e7b3ecb506a3acdac9247a410" name="firebird-classic" arch="src">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="db4949eb6da8a028b27835734f9984aa3033fc2c4b8eac51cb65cc392100ce14" name="krb5" arch="src">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="e36130a2bbb3ba959b274766fdf250ee0f4505f90d47cf1883e8a4adb4444a31" name="krb5-doc" arch="src">
    <version epoch="0" ver="1.10.2" rel="10.5.2"/>

<changelog author="mc@suse.de" date="1156420800">- update to version 1.5.1
- remove obsolete patches which are now included upstream
  * krb5-1.4.3-MITKRB5-SA-2006-001-setuid-return-checks.dif
  * trunk-fix-uninitialized-vars.dif</changelog>
<changelog author="mc@suse.de" date="1169467200">- update to version 1.6
  * Major changes in 1.6 include
  * Partial client implementation to handle server name referrals.
  * Pre-authentication plug-in framework, donated by Red Hat.
  * LDAP KDB plug-in, donated by Novell.</changelog>
<changelog author="mc@suse.de" date="1171886400">- add krb5-1.6-post.dif</changelog>
<changelog author="mc@suse.de" date="1176724800">- update to version 1.6.1 Beta1
- remove obsolete patches
  (krb5-1.6-post.dif, krb5-1.6-patchlevel.dif)</changelog>
<changelog author="mc@suse.de" date="1176897600">- build implementor.ps</changelog>
<changelog author="mc@suse.de" date="1177329600">- update to final 1.6.1 version
- replace te_ams with texlive in BuildRequires</changelog>
<changelog author="sschober@suse.de" date="1181736000">- removed executable permission from doc file</changelog>
<changelog author="mc@suse.de" date="1184241600">- update to version 1.6.2
- remove krb5-1.6.1-post.dif all fixes are included in this release</changelog>
<changelog author="mc@suse.de" date="1193140800">- update to krb5 version 1.6.3
  * fix CVE-2007-3999, CVE-2007-4743 svc_auth_gss.c buffer overflow
  * fix CVE-2007-4000 modify_policy vulnerability
  * Add PKINIT support
- remove patches which are upstream now
- enhance init scripts and xinetd profiles</changelog>
<changelog author="mc@suse.de" date="1213790400">- reduce rpmlint warnings</changelog>
<changelog author="mc@suse.de" date="1216987200">- add patches from SVN post 1.6.3
  * some fixes in the man pages</changelog>
<changelog author="mc@suse.de" date="1234785600">- update to pre 1.7 version
  * remove outdated documentation for kadm5 API</changelog>
<changelog author="mc@suse.de" date="1242216000">- update to version 1.7 Beta2</changelog>
<changelog author="mc@suse.de" date="1244030400">- update to final version 1.7</changelog>
<changelog author="mc@suse.de" date="1267704000">- update to version 1.8</changelog>
<changelog author="mc@suse.de" date="1269345600">- add post 1.8 fixes
  * Document the ticket_lifetime libdefaults setting</changelog>
<changelog author="mc@suse.de" date="1270814400">- update to version 1.8.1</changelog>
<changelog author="mc@suse.de" date="1314014400">- update to version 1.9.1</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2</changelog>
<changelog author="idonmez@suse.com" date="1346673600">- Build depend on texinfo &amp; texlive-dvips to fix the build</changelog>

</package>
<package pkgid="25663c55cc4805f25742efe38fb51f66f51edbd9440ad6806866b62a57502e70" name="krb5-mini" arch="src">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="279fd8191a5d0b000135f29feffc90bad1c2ce258a725fb664a942f7aeb6cbc1" name="perl" arch="src">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="870bd23362df62d52a6849adfd4610f6bb82bf29ab6f8098754d39b32f2699e1" name="sudo" arch="src">
    <version epoch="0" ver="1.8.6p3" rel="3.5.1"/>

<changelog author="puzel@novell.com" date="1275480000">- add sudo-CVE-2010-1646.patch (bnc#594738)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1276603200">- update to 1.7.2p7:
  * portability fixes
- changes from 1.7.2p6:
  * Handle duplicate variables in the environment
  * visudo: fix a crash when checking a sudoers file that has aliases
    that reference themselves
  * aliases: fix use after free in error message when a duplicate
    alias exists
  * visudo: prevent NULL dereference in printf()
- removed sudo-CVE-2010-1163.patch (merged upstream)
- removed sudo-CVE-2010-1646.patch (merged upstream)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1294920000">- add sudo-CVE-2011-0010.patch (bnc#663881)</changelog>
<changelog author="cprause@novell.com" date="1296129600">- added openldap schema file (bnc#667558)</changelog>
<changelog author="puzel@novell.com" date="1300363200">- update to sudo-1.8.0
  * Sudo has been refactored to use a modular framework that can
    support third-party policy and I/O logging plugins.
  * Defaults settings that are tied to a user, host or command may
    now include the negation operator. For example:
    Defaults:!millert lecture
    will match any user but millert.
  * The default PATH environment variable, used when no PATH
    variable exists, now includes /usr/sbin and /sbin.
  * Support for logging I/O for the command being run.
  * Sudo will now use the Linux audit system.
  + See /usr/share/doc/packages/sudo/NEWS for full list
- new configure script flags: enable-warnings, with-linux-audit,
  docdir, with-sendmail
- BuildRequires += audit-devel
- BuildRequires -= postfix
- PreReq += permissions
- add sudo-dont-ignore-LDFLAGS.patch
- drop sudo-1.7.1-defaults.diff (insults disabled in sudoers)
- drop sudo-1.7.1-__P.diff (no more __P in sudo sources)
- drop sudo-1.7.1-strip.diff (sudo no longer strips binaries)
- drop sudo-CVE-2011-0010.patch (in upstream)
- drop sudo-1.7.1-secure_path.diff (sudo now adds /sbin and
  /usr/sbin to $PATH if it is empty)
- drop sudo-1.7.1-pam_rhost.diff (fixed in upstream)
- sudo-1.7.1-sudoers.diff renamed to sudo-sudoers.patch
- sudo-1.7.1-env.diff renamed to sudoers2ldif-env.patch
- do not package *.pod files
- use %verifyscript
- timestamp directory moved from /var/run/sudo to /var/lib/sudo
- better commented default /etc/sudoers
- packaged /etc/sudoers.d directory
- new sudo-devel subpackage
- cleaned specfile</changelog>
<changelog author="puzel@novell.com" date="1305892800">- update to sudo-1.8.1p2
  - Two-character CIDR-style IPv4 netmasks are now matched
    correctly in the sudoers file.
  - A non-existent includedir is now treated the same as an empty
    directory and not reported as an error.
  - Removed extraneous parens in LDAP filter when
    sudoers_search_filter is enabled that can cause an LDAP search
    error.
  - A new LDAP setting, sudoers_search_filter, has been added to
    ldap.conf.  This setting can be used to restrict the set of
    records returned by the LDAP query.  Based on changes from
    Matthew Thomas.
  - White space is now permitted within a User_List when used in
    conjunction with a per-user Defaults definition.
  - A group ID (%#gid) may now be specified in a User_List or
    Runas_List.  Likewise, for non-Unix groups the syntax is
    %:#gid.
  - Support for double-quoted words in the sudoers file has been
    fixed.  The change in 1.7.5 for escaping the double quote
    character caused the double quoting to only be available at the
    beginning of an entry.
  - The fix for resuming a suspended shell in 1.7.5 caused problems
    with resuming non-shells on Linux.  Sudo will now save the
    process group ID of the program it is running on suspend and
    restore it when resuming, which fixes both problems.
  - A bug that could result in corrupted output in "sudo -l" has
    been fixed.
  - Sudo will now create an entry in the utmp (or utmpx) file when
    allocating a pseudo-tty (e.g. when logging I/O).  The
    "set_utmp" and "utmp_runas" sudoers file options can be used to
    control this.  Other policy plugins may use the "set_utmp" and
    "utmp_user" entries in the command_info list.
  - The sudoreplay utility now supports arbitrary session IDs.
    Previously, it would only work with the base-36 session IDs
    that the sudoers plugin uses by default.
  - Sudo now passes "run_shell=true" to the policy plugin in the
    settings list when sudo's -s command line option is specified.
    The sudoers policy plugin uses this to implement the "set_home"
    sudoers option which was missing from sudo 1.8.0.
  - The "noexec" functionality has been moved out of the sudoers
    policy plugin and into the sudo front-end, which matches the
    behavior documented in the plugin writer's guide.  As a result,
    the path to the noexec file is now specified in the sudo.conf
    file instead of the sudoers file.
  - The exit values for "sudo -l", "sudo -v" and "sudo -l command"
    have been fixed in the sudoers policy plugin.
  - Sudo now parses command line arguments before loading any
    plugins.  This allows "sudo -V" or "sudo -h" to work even if
    there is a problem with sudo.conf
- drop sudo-dont-ignore-LDFLAGS.patch (merged upstream)</changelog>
<changelog author="prusnak@opensuse.org" date="1318507200">- updated to sudo-1.8.2
  * Sudo, visudo, sudoreplay and the sudoers plug-in now have natural
    language support (NLS). This can be disabled by passing configure
    the --disable-nls option.  Sudo will use gettext(), if available,
    to display translated messages.  All translations are coordinated
    via The Translation Project, http://translationproject.org/.
  * Plug-ins are now loaded with the RTLD_GLOBAL flag instead of
    RTLD_LOCAL.  This fixes missing symbol problems in PAM modules
    on certain platforms, such as FreeBSD and SuSE Linux Enterprise.
  * I/O logging is now supported for commands run in background mode
    (using sudo's -b flag).
  * Group ownership of the sudoers file is now only enforced when
    the file mode on sudoers allows group readability or writability.
  * Visudo now checks the contents of an alias and warns about cycles
    when the alias is expanded.
  * If the user specifes a group via sudo's -g option that matches
    the target user's group in the password database, it is now
    allowed even if no groups are present in the Runas_Spec.
  * The sudo Makefiles now have more complete dependencies which are
    automatically generated instead of being maintained manually.
  * The "use_pty" sudoers option is now correctly passed back to the
    sudo front end.  This was missing in previous versions of sudo
    1.8 which prevented "use_pty" from being honored.
  * "sudo -i command" now works correctly with the bash version
    2.0 and higher.  Previously, the .bash_profile would not be
    sourced prior to running the command unless bash was built with
    NON_INTERACTIVE_LOGIN_SHELLS defined.
  * When matching groups in the sudoers file, sudo will now match
    based on the name of the group instead of the group ID. This can
    substantially reduce the number of group lookups for sudoers
    files that contain a large number of groups.
  * Multi-factor authentication is now supported on AIX.
  * Added support for non-RFC 4517 compliant LDAP servers that require
    that seconds be present in a timestamp, such as Tivoli Directory Server.
  * If the group vector is to be preserved, the PATH search for the
    command is now done with the user's original group vector.
  * For LDAP-based sudoers, the "runas_default" sudoOption now works
    properly in a sudoRole that contains a sudoCommand.
  * Spaces in command line arguments for "sudo -s" and "sudo -i" are
    now escaped with a backslash when checking the security policy.
- added missing include (grp-include.patch)</changelog>
<changelog author="vcizek@suse.com" date="1319457600">- update to sudo-1.8.3
  - Fixed expansion of strftime() escape sequences
    in the log_dir sudoers setting.
  - Esperanto, Italian and Japanese
    translations from translationproject.org.
  - Added --enable-werror configure option for gcc's
  - Werror flag.  - Visudo no longer
    assumes all editors support the +linenumber command line argument.
    It now uses a whitelist of editors known to support the option.
  - Fixed matching of network addresses when a netmask is specified but
    the address is not the first one in the CIDR block.
  - The configure script now check whether or not errno.h declares the
    errno variable. Previously, sudo would always declare errno itself
    for older systems that don't declare it in errno.h.
  - The NOPASSWD tag is now honored for denied commands too,
    which matches historic sudo behavior (prior to sudo 1.7.0).
  - Sudo now honors the DEREF
    setting in ldap.conf which controls how alias dereferencing is done
    during an LDAP search.
  - A symbol conflict with the
    pam_ssh_agent_auth PAM module that would cause a crash been
    resolved.
  - The inability to load a group provider plugin is no
    longer a fatal error.
  - A potential crash in the utmp handling
    code has been fixed.
  - Two PAM session issues have been resolved.
    In previous versions of sudo, the PAM session was opened as one
    user and closed as another. Additionally, if no authentication was
    performed, the PAM session would never be closed.
  - The LOGNAME,
    USER and USERNAME environment variables are preserved correctly
    again in sudoedit mode.
- grp-include.patch no longer needed</changelog>
<changelog author="aj@suse.de" date="1325073600">- Set timedir correctly</changelog>
<changelog author="vcizek@suse.com" date="1325678400">- update to sudo-1.8.3p1
  * Fixed a crash in the monitor process on Solaris when NOPASSWD
    was specified or when authentication was disabled.
  * Fixed matching of a Runas_Alias in the group section of a Runas_Spec.</changelog>
<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>

</package>
<package pkgid="cb7f21902d6dfbb846132760a987d1fe1a428de0b6de7445ce24efaaa2b28874" name="wireshark" arch="src">
    <version epoch="0" ver="1.8.6" rel="1.4.1"/>

<changelog author="cyliu@novell.com" date="1312977600">- security fixes (#bnc 706728)
  * CVE-2011-2597: Lucent/Ascend file parser susceptible to infinite loop
  * CVE-2011-2698: ANSI MAP dissector susceptible to infinite loop</changelog>
<changelog author="cyliu@novell.com" date="1317038400">- security fixes (#bnc 718032)
  * CVE-2011-3266: Wireshark IKE dissector vulnerability
  * CVE-2011-3360: Wireshark Lua script execution vulnerability
  * CVE-2011-3483: Wireshark buffer exception handling vulnerability</changelog>
<changelog author="tabraham@novell.com" date="1320235200">- update to 1.6.3
  - Security fixes:
  - wnpa-sec-2011-17 The CSN.1 dissector could crash. (Bug 6351)
  - Bug fixes:
  - Wireshark window takes very long time to show up if invalid
    network file path is at recent file list (Bug 3810)
  - ISUP party number dissection. (Bug 5221)
  - Ethernet packets with both VLAN tag and LLC header no longer
    displayed correctly. (Bug 5645)
  - SLL encapsuled 802.1Q VLAN is not dissected. (Bug 5680)
  - Dissection fails for frames with Gigamon Header and VLAN. (Bug 6305)
  - RTP Stream Analysis does not work for TURN-encapsulated RTP. (Bug 6322)
  - packet-csn1.c doesn't process CSN_CHOICE entries properly. (Bug 6328)
  - GUI crash on invalid IEEE 802.11 GAS frame. (Bug 6345)
  - ICMPv6 router advertisement Prefix Information Flag R "Router
    Address" missing. (Bug 6350)
  - Inner tag of 802.1ad frames not parsed properly. (Bug 6366)
  - Added cursor type decoding to MySQL dissector. (Bug 6396)
  - WPA IE pairwise cipher suite dissector uses incorrect value_string
    list. (Bug 6420)
  - text_import_scanner.l missing. (Bug 6531)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACnet, CSN.1, DTN, Ethernet, ICMPv6, IEEE 802.11,
    IEEE 802.1q, Infiniband, IPsec, MySQL, PCEP, PN-RT, RTP, S1AP, SSL
  - New and Updated capture file suppport:
  - Endace ERF.
- update to 1.6.2
  - Security fixes:
  - wnpa-sec-2011-12 A large loop in the OpenSafety dissector could
    cause a crash. (Bug 6138)
  - wnpa-sec-2011-16 The CSN.1 dissector could crash. (Bug 6139)
  - Bug fixes:
  - configure ignores (partially) LDFLAGS. (Bug 5607)
  - Build fails when it tries to #include &lt;getopt.h&gt;, not present in
    Solaris 9. (Bug 5608)
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - BACnet who-is request device range values are not decoded correctly
    in the packet details window. (Bug 5769)
  - Wireshark crashes if sercosiii module isn't installed. (Bug 6006)
  - Editcap could create invalid pcap files when converting from JPEG.
    (Bug 6010)
  - Timestamp is incorrectly decoded for ICMP Timestamp Response packets
    from MS Windows. (Bug 6114)
  - Wrong display of CSN_BIT in CSN.1. (Bug 6151)
  - Fix CSN_RECURSIVE_TARRAY last bit error in packet-csn1.c. (Bug 6166)
  - Wireshark cannot display Reachable time &amp; Retrans timer in IPv6 RA
    messages. (Bug 6168)
  - ReadPropertyMultiple-ACK not correctly dissected. (Bug 6178)
  - GTPv2 dissectors should treat gtpv2_ccrsi as optional. (Bug 6183)
  - tshark run with -Tpdml makes a seg fault. (Bug 6245)
  - TShark/dumpcap skips capture duration flag occasionally. (Bug 6280)
  - Wireshark improperly parsing 802.11 Beacon Country Information
    tag. (Bug 6264)
  - Wrong display of CSN_BIT under CSN_UNION. (Bug 6287)
  - Updated protocol support:
  - BACapp, Bluetooth L2CAP, CSN.1, DCERPC, GSM A RR, GTPv2, ICMP,
    ICMPv6, IKE, MEGACO, MSISDN, NDMP, OpenSafety, RTPS2, sFlow, SNMP, TCP
  - New and Updated capture file suppport:
  - CommView, pcap-ng, JPEG.
- update to 1.6.1
  - Security fixes:
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is
    not correct in wireshark's user guide. (Bug 5199)
  - Character echo pauses in Capture Filter field in Capture Options.
    (Bug 5356)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many .
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing arguments.
    (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while the
    "default" field does nothing . (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem without
    tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - Cannot Live-capture VirtualBox network packets with Wireshark; pipe
    problem. (Bug 6002)
  - Interface list in Capture Options isn't cleared when selecting other
    host. (Bug 6008)
  - H323 rate multiplier wrong. (Bug 6009)
  - Inclusion of config.h is too late in lex-files resulting in wrong
    definition of _FILE_OFFSET_BITS. (Bug 6012)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - Crash after applying "expert.severity" field as column. (Bug 6035)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - Wireshark crashes after repeating "File -&gt; Import -&gt; Cancel". (Bug 6080)
  - Decoding of MQ ASCII and EBCDIC Traffic Flow - ASCII shows fine,
    EBCDIC does not. (Bug 6084)
  - 802.11 Association Response Packet's "Status Code" field is imprecisely
    decoded/described. (Bug 6093)
  - Abis interface not correctly handled in gsmtap dissector. (Bug 6097)
  - Wrong decoding of RLC/MAC EGPRS Packet Downlink Ack/Nack (3GPP TS
    44.060). (Bug 6098)
  - CSN Ack/Nack Description wrongly handled in gsm_rlcmac_dl dissector
    (3GPP TS 44.060). (Bug 6101)
  - wireshark 1.6.0 and python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - New and Updated capture file suppport:
  - Network Monitor.
- update to 1.6.0
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Crash when sorting column while capturing. (Bug 4273)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Large file (greater than 2 GB) support has been improved.
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - Wireshark can export SSL session keys via File-&gt;Export-&gt;SSL Session
    Keys...
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI, ICMP and ICMPv6 service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters.
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
    instead of a separate tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors.
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default.
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - Wireshark and TShark can now read compressed Windows Sniffer files.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Broadcast/Multicast Control, Constrained Application Protocol (COAP),
    Digium TDMoE, Erlang Distribution Protocol, Ether-S-I/O, FastCGI, Fibre
    Channel over InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband
    Socket Direct Protocol (SDP), JSON, LISP Control, LISP Data, LISP,
    MikroTik MAC-Telnet, MRP Multiple Mac Registration Protocol (MMRP) Mongo
    Wire Protocol, MUX27010, Network Monitor 802.11 radio header, OPC UA
    ExtensionObjects, openSAFETY, PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD
    Framing, RObust Header Compression (ROHC), RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, USB/AT Commands, uTorrent Transport Protocol, WAI
    authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.5.1
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - TShark can show a specific occurrence of a field when using '-T fields'.
  - Custom columns can show a specific occurrence of a field.
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Constrained Application Protocol (COAP), Digium TDMoE, Erlang
    Distribution Protocol, Ether-S-I/O, FastCGI, Fibre Channel over
    InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband Socket
    Direct Protocol (SDP), JSON, LISP Data, MikroTik MAC-Telnet, Mongo Wire
    Protocol, Network Monitor 802.11 radio header, OPC UA ExtensionObjects,
    PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD Framing, RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, WAI authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.4.10
  - Security fixes:
  - wnpa-sec-2011-18 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered that the Infiniband dissector could
    dereference a NULL pointer. (Bug 6476)
  - wnpa-sec-2011-19 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered a buffer overflow in the ERF file
    reader. (Bug 6479)
  - Bug fixes:
  - Assertion failed when doing File-&gt;Quit-&gt;Save during live
    capture. (Bug 1710)
  - Wrong PCEP XRO sub-object decoding. (Bug 3778)
  - Decoding [Status Records] Timestamp Sequence Field in Bundle
    Protocol fails if over 32 bits. (Bug 4109)
  - wireshark-1.4.2 crashes when testing the example python
    dissector because of a dissector count assertion. (Bug 5431)
  - Wireshark crashes when attempting to open a file via drag &amp; drop
    when there's already a file open. (Bug 5987)
  - Add the ability to save filters from the Filter Toolbar into buttons
    on the Filter Toolbar. (Bug 6207)
  - Adding and removing custom HTTP headers requires a restart. (Bug 6241)
  - Can't read full 64-bit SNMP values. (Bug 6295)
  - BACnet property time-synchronization-interval (204) name shown
    incorrectly as time-synchronization-recipients. (Bug 6336)
  - [ASN.1 PER] Incorrect decoding of BIT STRING type. (Bug 6347)
  - Export-&gt;Object-&gt;HTTP-&gt; save all: Error on saving files. (Bug 6362)
  - Incorrect identification of UDP-encapsulated NAT-keepalive
    packets. (Bug 6414)
  - S1AP protocol can't decode IPv6 transportLayerAddress. (Bug 6435)
  - RTPS2 dissector doesn't handle 0 in the octestToNextHeader field.
    (Bug 6449)
  - packet-ajp13 fix, cleanup, and enhancement. (Bug 6452)
  - Network Instruments Observer file format bugs. (Bug 6453)
  - Wireshark crashes when using "Open Recent" 2 times in a row. (Bug 6457)
  - Wireshark packet_gsm-sms, display bug: Filler bits in TP-User Data
    Header. (Bug 6469)
  - wireshark unable to decode NetFlow options which have system scope
    size != 4 bytes. (Bug 6471)
  - Display filter Expression Dialog Box Error. (Bug 6472)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACapp, DTN, GSM SMS, Infiniband, IPsec, NetFlow,
    PCEP, RTPS2
- update to 1.4.9
  - Security fixes:
  - wnpa-sec-2011-13 A malformed IKE packet could consume excessive
    resources.
  - wnpa-sec-2011-14 A malformed capture file could result in an invalid
    root tvbuff and cause a crash. (Bug 6135) CVE-2011-3266
  - wnpa-sec-2011-15 Wireshark could run arbitrary Lua scripts. (Bug 6136)
  - Bug fixes:
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - H.323 RAS packets missing from packet counts in "Telephony-&gt;VoIP
    Calls" and the "Flow Graph" for the call. (Bug 5848)
  - Malformed Packet in decode for BGP-AD update. (Bug 6122)
  - BGP : AS_PATH attribute was decode wrong. (Bug 6188)
  - Fixes for SCPS TCP option. (Bug 6194)
  - Offset calculated incorrectly for sFlow extended data. (Bug 6219)
  - [Enter] key behavior varies when manually typing display filters.
    (Bug 6228)
  - Contents of pcapng EnhancedPacketBlocks with comments aren't
    displayed. (Bug 6229)
  - Misdecoding 3G Neighbour Cell Information Element in SI2quater
    message due to a coding typo. (Bug 6237)
  - Mis-spelled word "unknown" in assorted files. (Bug 6244)
  - btl2cap extended window shows wrong bit. (Bug 6257)
  - NDMP dissector incorrectly represents "ndmp.bytes_left_to_read"
    as signed. (Bug 6262)
  - ERF records with extension headers not written out correctly to
    pcap or pcap-ng files. (Bug 6265)
  - RTPS2: MAX_BITMAP_SIZE is defined incorrectly. (Bug 6276)
  - Copying from RTP stream analysis copies 1st line many times. (Bug 6279)
  - File types with no snaplen written out with a zero snaplen in pcap-ng
    files. (Bug 6289)
  - MEGACO context tracking fix - context id reuse. (Bug 6311)
  - Updated protocol support:
  - BGP, Bluetooth L2CAP, GSM A RR, H.225, IKE, MEGACO, NDMP, RTPS2, SCPS,
    sFlow, SNMP
  - New and Updated capture file suppport:
  - CommView, pcap-ng.
  - update to 1.4.8
  - Security fixes:
  - CVE-2011-2597 The Lucent/Ascend file parser was susceptible to an
    infinite loop.
  - The ANSI MAP dissector was susceptible to an infinite loop. (Bug 6044)
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - Wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is not
    correct in wireshark's user guide. (Bug 5199)
  - sflow decode error for some extended formats. (Bug 5379)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many.
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing
    arguments. (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while
    the "default" field does nothing. (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem
    without tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - H323 rate multiplier wrong. (Bug 6009)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - 802.11 Association Response Packet's "Status Code" field is
    imprecisely decoded/described. (Bug 6093)
  - Wireshark 1.6.0 and Python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - Updated protocol support:
  - ANSI MAP, GIOP, H.323, IEEE 802.11, MSRP, RPCAP, sFlow, TCP
  - New and Updated capture file suppport:
  - Lucent/Ascend
  - update to 1.4.7
  - Security fixes:
  - Large/infinite loop in the DICOM dissector. (Bug 5876)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Diameter dictionary file could crash Wireshark.
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted snoop file could crash Wireshark. (Bug 5912)
  - David Maciejak of Fortinet's FortiGuard Labs discovered that malformed
    compressed capture data could crash Wireshark. (Bug 5908)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Visual Networks file could crash Wireshark. (Bug 5934)
  - Bug fixes:
  - AIM dissector has some endian issues. (Bug 5464)
  - Telephony-&gt;MTP3-&gt;MSUS doesn't display window. (Bug 5605)
  - Support for MS NetMon 3.x traces containing raw IPv6 ("Type 7")
    packets. (Bug 5817)
  - Service Indicator in M3UA protocol data. (Bug 5834)
  - IEC60870-5-104 protocol, incorrect decoding of timestamp type
    CP56Time2a. (Bug 5889)
  - DNP3 dissector incorrect constants AL_OBJ_FCTR_16NF _FDCTR_32NF
    _FDCTR_16NF. (Bug 5920)
  - 3GPP QoS: Traffic class is not decoded properly. (Bug 5928)
  - Wireshark crashes when creating ProtoField.framenum in Lua. (Bug 5930)
  - Fix a wrong mask to extract FMID from DECT packets dissector. (Bug 5947)
  - Incorrect DHCPv6 remote identifier option parsing. (Bug 5962)
  - Updated protocol support:
  - DICOM, IEC104, M3UA, TCP
  - New and Updated capture file suppport:
  - Network Monitor
- Drop patches (fixed upstream):
  + wireshark-1.6.2-CVE-2011-3483.patch
  + wireshark-1.6.2-CVE-2011-3360.patch
  + wireshark-1.6.2-CVE-2011-3266.patch
  + wireshark-1.4.8-CVE-2011-2698.patch
  + wireshark-1.4.8-CVE-2011-2597.patch
  + wireshark-1.2.17-CVE-2011-2175.patch
  + wireshark-1.2.17-CVE-2011-2174.patch
  + wireshark-1.2.17-CVE-2011-1959.patch
  + wireshark-1.2.17-CVE-2011-1958.patch
  + wireshark-1.2.17-CVE-2011-1957.patch
  + wireshark-nfsv4-opts.patch
- changed spec to resolve rpmlint warning regarding devel package in
  non-devel group
- changed spec to resolve rpmlint warnings regarding macro-in-comment</changelog>
<changelog author="cyliu@suse.com" date="1326801600">- update to 1.6.5
  - Security fixes:
  - wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to
    properly check record sizes for many packet capture file formats.
    (Bug 6663, bug 6666, bug 6667, bug 6668, bug 6669, bug 6670)
  - wnpa-sec-2012-02  Wireshark could dereference a NULL pointer and
    crash. (Bug 6634)
  - wnpa-sec-2012-03  The RLC dissector could overflow a buffer. (Bug 6391)
  - Bug fixes:
  - "Closing File!" Dialog Hangs. (Bug 3046)
  - Sub-fields of data field should appear in exported PDML as children
    of the data field instead of as siblings to it. (Bug 3809)
  - Incorrect time differences displayed with time reference set. (Bug 5580)
  - Wrong packet type association of SNMP trap after TFTP transfer. (Bug 5727)
  - SSL/TLS decryption needs wireshark to be rebooted. (Bug 6032)
  - Export HTTP Objects -&gt; save all crashes Wireshark. (Bug 6250)
  - Wireshark Netflow dissector complains there is no template found though
    the template is exported. (Bug 6325)
  - DCERPC EPM tower UUID must be interpreted always as little endian.
    (Bug 6368)
  - Crash if no recent files. (Bug 6549)
  - IPv6 frame containing routing header with 0 segments left calculates wrong
    UDP checksum. (Bug 6560)
  - IPv4 UDP/TCP Checksum incorrect if routing header present. (Bug 6561)
  - Incorrect Parsing of SCPS Capabilities Option introduced in response
    to bug 6194. (Bug 6562)
  - Various crashes after loading NetMon2.x capture file. (Bug 6578)
  - Fixed compilation of dumpcap on some systems (when MUST_DO_SELECT is
    defined). (Bug 6614)
  - SIGSEGV in SVN 40046. (Bug 6634)
  - Wireshark dissects TCP option 25 as an "April 1" option. (Bug 6643)
  - ZigBee ZCL Dissector reports invalid status. (Bug 6649)
  - ICMPv6 DNSSL option malformed on padding. (Bug 6660)
  - Wrong tvb_get_bits function call in packet-csn1.c. (Bug 6708)
  - [UDP] - Length Field of Pseudo Header while computing CheckSum is not
    correct. (Bug 6711)
  - pcapio.c: bug in libpcap_write_interface_description_block. (Bug 6719)
  - Memory leaks in various dissectors.
  - Bytes highlighted in wrong Byte pane when field selected in Details pane.
  - Updated Protocol Support
  - BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management,
    H245 HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6,
    ISAKMP KERBEROS LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP
    SSL SYSLOG TCP, UDP, XML ZigBee ZCL
  - New and Updated Capture File Support
  - Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network
    Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer, Tektronix
    K12, WildPackets {Airo,Ether}Peek.
- update to 1.6.4
  - Bug fixes:
  - Patch to fix memory leaks/errors in Lua plugin. (Bug 5575)
  - Wireshark crashes if a field of type BASE_CUSTOM is applied as a
    column. (Bug 6503)
  - Filter Expression dialog can only be opened once. (Bug 6537)
  - Wireshark crashes if compiled without GLib thread support. (Bug 6540)
  - 80211 QoS Control: Add Raw TID. (Bug 6548)
  - SNMP length check error. (Bug 6564)
  - UCP dissector bug of operation 61. (Bug 6570)
- fix bnc#741187, #741188, #741190</changelog>
<changelog author="asn@cryptomilk.org" date="1330603200">- Add known bit for Netlogon ServerAutheticate2 flags.</changelog>
<changelog author="zaitor@opensuse.org" date="1333281600">- Update to version 1.6.6:
  + wnpa-sec-2012-04: The ANSI A dissector could dereference a NULL
    pointer and crash. (Bug 6823)
  + wnpa-sec-2012-05: The IEEE 802.11 dissector could go into an
    infinite loop. (Bug 6809)
  + wnpa-sec-2012-06: The pcap and pcap-ng file parsers could crash
    trying to read ERF data. (Bug 6804)
  + wnpa-sec-2012-07: The MP2T dissector could try to allocate too
    much memory and crash. (Bug 6804)
  + The Windows installers now include GnuTLS 1.12.18, which fixes
    several vulnerabilities.
  + Bugs fixed:
  - ISO SSAP: ActivityStart: Invalid decoding the activity
    parameter as a BER Integer. (Bug 2873)
  - Forward slashes in URI need to be converted to backslashes if
    WIN32. (Bug 5237)
  - Character echo pauses in Capture Filter field in Capture
    Options. (Bug 5356)
  - Some PGM options are not parsed correctly. (Bug 5687)
  - dumpcap crashes when capturing from pipe to a pcap-ng file
    (e.g., when passing data from CACE Pilot to Wireshark). (Bug
    5939)
  - Unable to rearrange columns in preferences on Windows. (Bug
    6077) (Note: this bug still affects the 64-bit package)
  - No error for UDP/IPv6 packet with zero checksum. (Bug 6232)
  - Wireshark installer doesn't add access_bpf in 10.5.8. (Bug
    6526)
  - Corrupted Diameter dictionary file that crashes Wireshark.
    (Bug 6664)
  - packetBB dissector bug: More than 1000000 items in the tree
    possible infinite loop. (Bug 6687)
  - ZEP dissector: Timestamp not always displayed correctly.
    Fractional seconds never displayed. (Bug 6703)
  - GOOSE Messages don't use the length field to perform the
    dissection. (Bug 6734)
  - Ethernet traces in K12 text format sometimes give bogus
    "malformed frame" errors and other problems. (Bug 6735)
  - max_ul_ext isn't printed/decoded to the packet details log in
    GTP protocol packet. (Bug 6761)
  - non-IPP packets to or from port 631 are dissected as IPP.
    (Bug 6765)
  - lua proto registration fails for uppercase proto /
    g_ascii_strdown problem. (Bug 6766)
  - no menu item Fle-&gt;Export-&gt;SSL Session Keys in GTK. (Bug 6813)
  - IAX2 dissector reads past end of packet for unknown IEs. (Bug
    6815)
  - TShark 1.6.5 immediately crashes on SSL decryption (every
    time). (Bug 6817)
  - USB: unknown GET DESCRIPTOR response triggers assert failure.
    (Bug 6826)
  - IEEE1588 PTPv2 over IPv6. (Bug 6836)
  - Patch to fix DTLS decryption. (Bug 6847)
  - Expression... dialog crash. (Bug 6891)
  - display filter "gtp.msisdn" not working. (Bug 6947)
  - Multiprotocol Label Switching Echo - Return Code: Reserved(5)
    (Bug 6951)
  - ISAKMP : VendorID CheckPoint : Malformed Packet. (Bug 6972)
  - Adding a Custom HTTP Header Field with a trailing colon
    causes wireshark to immediately crash (and crash upon
    restart). (Bug 6982)
  - Radiotap dissector lists a bogus "DBM TX Attenuation" bit.
    (Bug 7000)
  - MySQL dissector assertion. (Ask 8649)
  - Radiotap header format data rate alignment issues. (Ask 8649)</changelog>
<changelog author="reddwarf@opensuse.org" date="1334404800">- Update to version 1.6.7:
  + Bugs fixed:
  - Malformed Packets H263-1996 (RFC2190). (Bug 6996)
  - Wireshark could crash while trying to open an rpcap: URL.
    (Bug 6922)
  + Updated H.263 Protocol Support</changelog>
<changelog author="andreas.stieger@gmx.de" date="1337688000">- adjust wireshark-corosync-packet-dissector.patch for source changes
- update to upstream 1.6.8
  + security fixes
  * wnpa-sec-2012-08 / CVE-2012-2392
    Infinite and large loops in the ANSI MAP, ASF, BACapp,
    Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 dissectors
    have been fixed. Discovered by Laurent Butti. (Bugs 6805,
    7118, 7119, 7120, 7121, 7122, 7124, 7125)
  * wnpa-sec-2012-09 / CVE-2012-2393
    The DIAMETER dissector could try to allocate memory improperly
    and crash. (Bug 7138)
  * wnpa-sec-2012-10 / CVE-2012-2394
    Wireshark could crash on SPARC processors due to misaligned
    memory. Discovered by Klaus Heckelmann. (Bug 7221)
  + bug fixes
  * User-Password - PAP decoding passwords longer than 16 bytes.
    (Bug 6779)
  * The MSISDN is not seen correctly in GTP packet. (Bug 7042)
  * Wireshark doesn't calculate the right IPv4 destination using
    source routing options when bad options precede them. (Bug
    7043)
  * BOOTP dissector issue with DHCP option 82 - suboption 9. (Bug
    7047)
  * MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW
    packets. (Bug 7089)
  * ANSI MAP infinite loop. (Bug 7119)
  * HCIEVT infinite loop. (Bug 7122)
  * Wireshark doesn't decode NFSv4.1 operations. (Bug 7127)
  * LTP infinite loop. (Bug 7124)
  * Wrong values in DNS CERT RR. (Bug 7130)
  * Megaco parser problem with LF in header. (Bug 7198)
  * OPC UA bytestring node id decoding is wrong. (Bug 7226)
  + Updated Protocol Support
    ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP,
    IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA,
    RADIUS
  + New and Updated Capture File Support
    5View, CSIDS, pcap, pcap-ng</changelog>
<changelog author="opensuse@sukimashita.com" date="1338724800">- Add all known headers to devel package in order to make it
  actually useable and allow building dissectors externally</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340366400">- update to upstream 1.8.0:
  * supports capturing from multiple interfaces at once.
  * add, edit, and save packet and capture file annotations.
  * pcap-ng file format is default
  * Decryption key management for IEEE 802.11, IPsec, and ISAKMP
    is easier.
  * GeoIP IPv6 databases are now supported.
  * large number of protocol dissectors added and updated
  * support for many capture file formats added and updated
  For a full list refer to the release notes:
  https://www.wireshark.org/docs/relnotes/wireshark-1.8.0.html
- drop wireshark-corosync-packet-dissector.patch, no longer compiles
  even after updating
- drop wireshark-1.6.5-netlogon-aes.patch, applied upstream
- drop idl2wrs command from -devel package
- update header files in include.filelist
- refresh wireshark-1.2.0-disable-warning-dialog.patch
- refresh wireshark-1.2.0-geoip.patch
- add wireshark-1.8.0-gmodule.patch to fix linking in factory</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343131200">- update to upstream 1.8.1 (bnc#772738)
  + vulnerabilities fixed:
  * The PPP dissector could crash
    (wnpa-sec-2012-11 CVE-2012-4048)
  * The NFS dissector could use excessive amounts of CPU
    (wnpa-sec-2012-12 CVE-2012-4049)
  + bug fixes:
  * Wireshark crashes on bootp filter
  * Wireshark &gt; 1.4 does not correctly read Association ID for PS
    Poll packets
  * Radius-EAP broken since 1.8.0 release
  * SNMP incorrectly marks SNMPv3 "discovery" packet as malformed
  * Widgets are not properly expanded in GTK3
  * Find Next Mark duplicated on Edit Menu
  * DVB-CI/CI+: fix offset error in operator_info apdu
  * Unable to correctly identify IEC 61850 MMS packets
  * WinPcap doesn't install if vcredist_x64 requires reboot
- remove wireshark-1.8.0-gmodule.patch, fixed upstream</changelog>
<changelog author="andreas.stieger@gmx.de" date="1345032000">- update to upstream 1.8.2 (bnc#776083)
  + vulnerabilities fixed:
  * The DCP ETSI dissector could trigger a zero division.
    (wnpa-sec-2012-13 CVE-2012-4285)
  * The MongoDB dissector could go into a large loop.
    (wnpa-sec-2012-14 CVE-2012-4287)
  * The XTP dissector could go into an infinite loop.
    (wnpa-sec-2012-15 CVE-2012-4288)
  * The ERF dissector could overflow a buffer.
    (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295)
  * The AFP dissector could go into a large loop.
    (wnpa-sec-2012-17 CVE-2012-4289)
  * The RTPS2 dissector could overflow a buffer.
    (wnpa-sec-2012-18 CVE-2012-4296)
  * The GSM RLC MAC dissector could overflow a buffer.
    (wnpa-sec-2012-19 CVE-2012-4297)
  * The CIP dissector could exhaust system memory.
    (wnpa-sec-2012-20 CVE-2012-4291)
  * The STUN dissector could crash.
    (wnpa-sec-2012-21 CVE-2012-4292)
  * The EtherCAT Mailbox dissector could abort.
    (wnpa-sec-2012-22 CVE-2012-4293)
  * The CTDB dissector could go into a large loop.
    (wnpa-sec-2012-23 CVE-2012-4290)
  * The pcap-ng file parser could trigger a zero division.
    (wnpa-sec-2012-24 CVE-2012-4286)
  * The Ixia IxVeriWave file parser could overflow a buffer.
    (wnpa-sec-2012-25 CVE-2012-4298)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.html
- adjust wireshark-1.2.0-disable-warning-dialog.patch for moved lines</changelog>
<changelog author="cfarrell@suse.com" date="1346414400">- license update: GPL-2.0+ and GPL-3.0+
  According to the COPYING file the PIDL utility (standalone tool) is
  GPL-3.0+ licensed</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to upstream 1.8.3 (bnc#783275)
  + vulnerabilities fixed:
  * The HSRP dissector could go into an infinite loop.
    (wnpa-sec-2012-26 CVE-2012-5237)
  * The PPP dissector could abort.
    (wnpa-sec-2012-27 CVE-2012-5238)
  * Martin Wilck discovered an infinite loop in the DRDA dissector.
    (wnpa-sec-2012-28 CVE-2012-5239 CVE-2012-3548 bnc#778000)
  * Laurent Butti discovered a buffer overflow in the LDP dissector.
    (wnpa-sec-2012-29 CVE-2012-5240)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.3.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1352894400">- for openSUSE 12.2 and later, build against lua51-devel instead
  of lua-devel for Lua support (bnc#780669)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354190400">- update to 1.8.4 [bnc#792005]
  + vulnerabilities fixed:
  * Wireshark could leak potentially sensitive host name
    resolution information when working with multiple pcap-ng
    files.
    wnpa-sec-2012-30 CVE-2012-5592
  * The USB dissector could go into an infinite loop.
    wnpa-sec-2012-31 CVE-2012-5593
  * The sFlow dissector could go into an infinite loop.
    wnpa-sec-2012-32 CVE-2012-5594
  * The SCTP dissector could go into an infinite loop.
    wnpa-sec-2012-33 CVE-2012-5595
  * The EIGRP dissector could go into an infinite loop.
    wnpa-sec-2012-34 CVE-2012-5596
  * The ISAKMP dissector could crash.
    wnpa-sec-2012-35 CVE-2012-5597
  * The iSCSI dissector could go into an infinite loop.
    wnpa-sec-2012-36 CVE-2012-5598
  * The WTP dissector could go into an infinite loop.
    wnpa-sec-2012-37 CVE-2012-5599
  * The RTCP dissector could go into an infinite loop.
    wnpa-sec-2012-38 CVE-2012-5600
  * The 3GPP2 A11 dissector could go into an infinite loop.
    wnpa-sec-2012-39 CVE-2012-5601
  * The ICMPv6 dissector could go into an infinite loop.
    wnpa-sec-2012-40 CVE-2012-5602
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add wireshark-suidflags.patch: Allow to pass SUID_{C,LD}FLAGS to
  introduce -fPIE -pie as needed for suid binaries
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.
- Export SUID_{C,LD}FLAGS with appropriate flags.</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- build with gtk3 on 11.4+
- disable zlib makes a sense for 1.2.5 only
- turn some features on (python, gcrypt, gnutls, plugins dir)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1359633600">- update to 1.8.5 [bnc#801131]
  + vulnerabilities fixed:
  * Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI
    DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS,
    SDP, and SIP dissectors
    wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574
    CVE-2013-1575 CVE-2013-1576 CVE-2013-1577 CVE-2013-1578
    CVE-2013-1579 CVE-2013-1580 CVE-2013-1581
  * The CLNP dissector could crash
    wnpa-sec-2013-02 CVE-2013-1582
  * The DTN dissector could crash
    wnpa-sec-2013-03 CVE-2013-1583 CVE-2013-1584
  * The MS-MMC dissector (and possibly others) could crash
    wnpa-sec-2013-04 CVE-2013-1585
  * The DTLS dissector could crash
    wnpa-sec-2013-05 CVE-2013-1586
  * The ROHC dissector could crash
    wnpa-sec-2013-06 CVE-2013-1587
  * The DCP-ETSI dissector could corrupt memory
    wnpa-sec-2013-07 CVE-2013-1588
  * The Wireshark dissection engine could crash
    wnpa-sec-2013-08 CVE-2013-1589
  * The NTLMSSP dissector could overflow a buffer
    wnpa-sec-2013-09 CVE-2013-1590
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1362657600">- update to 1.8.6 [bnc#807942]
  + vulnerabilities fixed:
  * The TCP dissector could crash.
    wnpa-sec-2013-10 CVE-2013-2475
  * The HART/IP dissectory could go into an infinite loop.
    wnpa-sec-2013-11 CVE-2013-2476
  * The CSN.1 dissector could crash.
    wnpa-sec-2013-12 CVE-2013-2477
  * The MS-MMS dissector could crash.
    wnpa-sec-2013-13 CVE-2013-2478
  * The MPLS Echo dissector could go into an infinite loop.
    wnpa-sec-2013-14 CVE-2013-2479
  * The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15 CVE-2013-2480
  * The Mount dissector could crash.
    wnpa-sec-2013-16 CVE-2013-2481
  * The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17 CVE-2013-2482
  * The ACN dissector could attempt to divide by zero.
    wnpa-sec-2013-18 CVE-2013-2483
  * The CIMD dissector could crash.
    wnpa-sec-2013-19 CVE-2013-2484
  * The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20 CVE-2013-2485
  * The RELOAD dissector could go into an infinite loop.
    wnpa-sec-2013-21 CVE-2013-2486 CVE-2013-2487
  * The DTLS dissector could crash.
    wnpa-sec-2013-22 CVE-2013-2488
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html</changelog>

</package>
<package pkgid="54253d4b6b599b450ba87fc952839a27af20bd9bcbc6be346f0f326121325c24" name="microcode_ctl" arch="src">
    <version epoch="0" ver="1.17" rel="142.5.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1275134400">- merge both Fedora and Debian improvements, most notably:
  * microcode.dat is now considered firmware, and installed in /lib/firmware
  * package no longer includes an init script microcode is loaded
    using udev rules.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275307200">- udev rules must live in %{_sysconfdir} otherwise it wont work.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275307200">- udev rules back into /lib/udev ,as suggested by Kay</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1285070400">- Update Intel microcode to version 20100914, vendor
  does not provide information regarding what it fixes.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1292760000">- Update microcode to 20101123, Intel does not disclose
  what this fixes.</changelog>
<changelog author="trenn@novell.com" date="1295352000">- Revive microcode.ctl service as 2.6.37 does not throw cpu add
  uevents. This is a workaround for 11.4 and will get reverted
  as soon as we go for 2.6.38 where cpu driver autoloading patches
  are included.
- Service will be forced to be enabled on all Intel and all
  AMD new than fam 10h.
- Add AMD microcode patch and logic to get it loaded</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305028800">- microcode.init, do not load microcode on Virtual Machines
  ugly error messages shown in syslog otherwise.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306065600">- Open all FD with O_CLOEXEC</changelog>
<changelog author="aj@suse.de" date="1309089600">- Update microcode to 20110428, Intel does not disclose
  what this fixes.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1318334400">- Update microcode to 20110915, Intel does not disclose
  what this fixes.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1321963200">- Add a systemd.service in the meanwhile we sort out
  if this has to be automatically handled by the kernel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323777600">- Update to microcode 20111110
- First steps for autoloading, currently only working with systemd
  * add script that generates microcode in a form understanable
    by the kernel.
  * add microcode.conf to modules-load.d so the module is
    loaded at boot with systemd which in turn will load
    updated microcode automatically.
    The kernel will in the near future autoload the module when
    a supported CPU is detected (WIP)
  * Axe all init scripts and systemd service files. this has
    to be handled in udev/kernel. (WIP)</changelog>
<changelog author="jeffm@suse.com" date="1335268800">- Update AMD microcode to 2012-01-17.
  - Autoloading on fam15 and newer have a _famXX suffix, which is
    causing warnings during boot on new systems (bnc#758499).</changelog>
<changelog author="cfarrell@suse.com" date="1338897600">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format</changelog>
<changelog author="crrodriguez@opensuse.org" date="1339243200">- Microcode autoload available in recent kernels is not
  very useful without this package, use proper Supplements
  to ensure it gets installed in the supported machines</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340193600">- Update to microcode 20120606, as usual, there is no information
  about the problems that has been fixed.</changelog>
<changelog author="trenn@suse.de" date="1349179200">- Update to Intel microcode 20120606-v2.
  An fixed version of the previous released one.</changelog>
<changelog author="trenn@suse.de" date="1350561600">- Update to latest AMD microcode version: 2012-01-17</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351252800">- Drop systemd units that loaded the microcode module
  it is loaded automatically nowdays.
- reload the microcode on pacakge update.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- bnc#809348
- Update microcode to version 20130222
- No changelog available.</changelog>

</package>
<package pkgid="f54cdbe408d7b10f99ca87c37da23951bde54d6c7c81f83a95c54f00b6582597" name="openal-soft" arch="src">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="2a89bcfe7e848f9a0c265d557c901c825abc6944d370e67714c1be700a76d33f" name="stellarium" arch="src">
    <version epoch="0" ver="0.12.0" rel="2.4.1"/>

<changelog author="lmichnovic@suse.cz" date="1151582400">Initial version 0.8.1</changelog>
<changelog author="lmichnovic@suse.cz" date="1161172800">- Update to version 0.8.2</changelog>
<changelog author="lmichnovic@suse.cz" date="1172404800">- Fixed X libdir and X headers for new X.org 7.x</changelog>
<changelog author="lmichnovic@suse.cz" date="1181822400">- update to version 0.9.0
  * broken sk translation ;(
  * uses cmake
  * window is handled by qt 4.2
- creating dir /usr/share/stellarium/data/script_internet_update
- installing stellarium_user_guide-0.9.0-1.pdf as doc
- installing xpm icon</changelog>
<changelog author="lars@linux-schulserver.de" date="1200744000">- update to 0.9.1:
  + Got rid of autoconf/automake (Hooray!)
  + Fixed a grid RA labeling bug.
  + Improved the plug-in managment.
  + Fixed nebula names loading (bug #1740287)
  + Recoded time methods based on Qt time function
    (this fixed bug #1740595, LANG=en_IN crash).
  + Use the new Grid class by Guillaume Chéreau for NebulaMgr.
  + Made StelUI and StelCommandMgr real StelModules.
  + Increased grid labeling brightness.
  + Fixed splash screen flickering and logo image truncation in
    full screen mode.
  + Fixed wrong nebula size (bug #1673142)
  + Fixed constellation art intensity bug (bug #1733482)
  + Got rid of all wstreamstring and therefore don't require
    STLPort anymore for MinGW compilation.
  + Added more command line options.
  + Re-coded StelAppQt4 init and deinit to prevent GLContext errors.
  + New config parameters for controlling star brigthness,
    size, color
  + Circles around telescope markers indicating ocular FOV
  + Applied patches for bugs #1769632 (bad init in
    get_tm_from_Julian), #1769584 (NebulaMgr.cpp reports wrong name
    on error) and #1758435 (segfault)
  + Fixed bug #1781617 (added altitude unit) and #1751366
    (segfault when changing projection mode).
  + StelModule now derive from QObject.
  + First testing new script engine based on QObject slots.
  + Recoded fully the texture manager now based on Qt signal/slots.
    It handles multithreading loading and downloading of images.
    As a direct result, loading time is divided by 2!
  + Now use Qt4.3, and replaced CURL by QtNetwork.
  + Fixed some date display bugs in config window.
  + Added new translations for th ml he fil tl eo lt mk
  + Added new sky culture, Tupi-Guarani from Brazil
    (thanks to pmarcelopontes)
- added stellarium-0.9.1-missing_includes.patch</changelog>
<changelog author="lars@linux-schulserver.de" date="1222171200">- update to 0.10.0 beta:
  + new redesigned GUI
  + important performance and memory usage improvement
  + faster start-up
  + many new features such as dynamic eye adaptation to bright
    objects, improved rendering, light pollution simulation or
    improved location selector
  + The source code was also massively cleaned and refactored.
  + This version lacks 2 features from the previous releases,
    namely the text user interface and the script engine which are
    being recoded for a later release.</changelog>
<changelog author="lars@linux-schulserver.de" date="1222171200">- moved to Education base repository</changelog>
<changelog author="lars@linux-schulserver.de" date="1233576000">- update to 0.10.1:
  + Added reset all config options button.
  + Added code for uncompressing gzip files
  + Allowed for gzip compressed JSON files.
  + Fixed flip buttons bug.
  + Fixed min FPS feature.
  + Implemented screenshots inverted colors feature+associated GUI
  + Re-coded grid display from scratch.
  + Refactored large part of the Navigator and Projector classes.
    Added a StelPainter class allowing many optimizations and
    simpler API.
  + Re-added telescope control key bindings.
  + Improved the doxygen developers documentation.
  + Added Simbad lookup to the search window.
  + Fixed ecliptic line rendering.
  + Fixed grid rendering bugs.
  + Fixed sun's magnitude bug.
  + Added automatic star catalog downloader to GUI.
    Star catalog settings are now defined in a config file.
  + Converted system-dependent star catalog memory mapping code
    to QFile::map().
  + Added log file for debugging output.
    Prepends system specs, such as memory and CPU information.
  + Imported KdeWin32 code for POSIX emulation on Windows.
  + Fixed build with Qt 4.5.
  + Fixed full screen problems at init.
  + Optimized VecXX contructors (no more default values).
  + Added translations for Albanian and Bosnian.
  + Fixed many bugs.</changelog>
<changelog author="lars@linux-schulserver.de" date="1236600000">- update to 0.10.2:
  + Based on Qt 4.5.
  + Display constellations lines using nicely distorted arcs.
  + Fixed GUI problems when creating a new location.
  + Fixed the grid lines wrap around at the discontinuities in
    cylindrical and Mercator projection.
  + Hide the planet computation problems after year 80608.
  + Use the Qt raster engine by default. This fixes mac rendering
    bugs and speeds up greatly the GUI rendering.
  + Improved management of intersection of viewports with large FOV
    and projections with singularities.
  + Added Hammer-Aitoff projection allowing full sky overview.
  + Fixed various bugs.</changelog>
<changelog author="lars@linux-schulserver.de" date="1236772800">- updated documentation (pdf)
- added entry in susehelp center for documentation</changelog>
<changelog author="cyberorg@opensuse.org" date="1277726400">- Update to 0.10.5:
  sky
  * default catalogue of over 600,000 stars
  * extra catalogues with more than 210 million stars
  * asterisms and illustrations of the constellations
  * constellations for twelve different cultures
  * images of nebulae (full Messier catalogue)
  * realistic Milky Way
  * very realistic atmosphere, sunrise and sunset
  * the planets and their satellites
  interface
  * a powerful zoom
  * time control
  * multilingual interface
  * fisheye projection for planetarium domes
  * spheric mirror projection for your own low-cost dome
  * all new graphical interface and extensive keyboard control
  * telescope control
  visualisation
  * equatorial and azimuthal grids
  * star twinkling
  * shooting stars
  * eclipse simulation
  * skinnable landscapes, now with spheric panorama projection
  customisability
  * plugin system adding artifical satellites, ocular simulation, telescrope configuration and more
  * add your own deep sky objects, landscapes, constellation images, scripts...</changelog>
<changelog author="reddwarf@opensuse.org" date="1285502400">- Run spec-cleaner
- Remove support for pre-11.1 openSUSE versions
- Remove multiple unneeded BuildRequires
- Compile with latest gcc instead of 4.3
- Fixed Group and License tags
- Remove missuse of -fPIC with -no_fpic patch
- Remove unneeded SUSE_ASNEEDED=0 and %suse_update_config
- Run make with VERBOSE=1 to help rpmlint
- Use upstream's menu icon and install it under hicolor theme
- Enable sound support
- Fix Phonon use with -phonon patch</changelog>
<changelog author="reddwarf@opensuse.org" date="1291636800">- update to 0.10.6
  + New feature for installing landscapes from ZIP archives.
  + New plugin: Solar System editor.
  + New plugin: Time Zone manual override.
  + Oculars plugin: customizable keyboard shortcuts.
  + Satellites plugin: added new orbit prediction engine w/ orbits.
  + Satellites plugin: can now update TLEs from a local file.
  + Telescope control plugin: added manual equinox/epoch override.
- removed -no_fpic, -cmake and -phonon patches</changelog>
<changelog author="draht@suse.de" date="1315656000">- update to 0.11.0
  + New feature: atmosphere refraction support.
  + New plugin: Historical supernova.
  + New translatable strings: landscapes.
  + New moons of solar system planets
  + New feature: using different symbols for nebula icons.
  + TimeZone plug-in: fixed a bug preventing the saving of custom
    time zones.
  + Ocular plug-in: Corrected the calculation of CCD FOV.
  + Ocular plug-in: Implemented rotating the CCD bounding box.
  + Ocular plug-in: Made Telrad &amp; CCD mutually exclusive.
  + Ocular plug-in: Implemented better binoculars support
  + Ocular plug-in: Redesign dialog.
  + SVMT plug-in: Adding QtWebKit dependency.
  + Satellite plug-in: improve of code.
  + Solar System Editor plug-in: fixed MPES online search and updated hard-coded URLs
  + Skycultures: two new skyculture descriptions in Norwegian (Bokmål).
  + Redesign search tool
  + Improved texture manager.</changelog>
<changelog author="lars@linux-schulserver.de" date="1321185600">- update to 0.11.1:
  + new skyculture: Arabic
  + new moons and rings (LP: #815484, #834336)
  + new translations for landscapes and sky cultures (LP: #849292)
  + possibility to observate geo-orbiting satellites (LP: #837274)
  + new cities (LP: #856343, #860206)
  Fixes:
  + misspelling on a star name (LP: #884795)
  + location window: map pointer position is updated on
    longitude/latitude change.
  + location window: fixed checking "Use as default" changing the
    name of the selected location to "New Location" (LP: #881613)
  + Solar System Editor plug-in: a bug in the parsing of MPC lists:
    the epoch's Julian Day value was wrong by 0.5 JD (LP: #836839)
  + Solar System Editor plug-in: crash while trying to browse for
    a local file (LP: #837396)
  + Historical Supernovae plug-in: a bug in plug-in name (LP: #803157)
  + Historical Supernovae plug-in: a bug in selected instead
    of nearby stars (LP: #835815)
  + doesn't load localised description of skyculture/landscape if
    applanguage=system_default (LP: #845924)
  + add/remove landscapes dialog bug in OSX 10.6.8 (LP: #812008)
  + horizon line setting not saved (LP: #811945)
  + orbital period totally wrong for Himalia (LP: #806174)
  + flag_show_fps = false &amp; flag_show_fov = flase (LP: #728294)
  + 0.11.0 will crash if a landscape is selected with misspelled
    planet name (LP: #835422)
  + crash on selecting off-Earth location in the Location
    window (LP: #834886)
  + 0.11.0 crashes when switching language while location window
    is open (LP: #824936)
  + 0.11.0 crashes when trying using custom distortion file
    (LP: #871313)</changelog>
<changelog author="badshah400@gmail.com" date="1338897600">- Update to version 0.11.3:
  + Added:
  - ecliptic grid (LP: #834307)
  - world observatories to the locations list (LP: #891643)
  - allow configuration of url for SIMBAD lookups (LP: #948528)
  - opportunity to freely choose the object information to
    display (LP: #834325)
  - Pluto texture (LP: #906766)
  + Many bugs fixed; see installed file
    /usr/share/doc/packages/stellarium/ChangeLog for a complete
    list.
- Changes from version 0.11.2:
  + Too many to list; see installed file
    /usr/share/doc/packages/stellarium/ChangeLog for a complete
    list.
- Cleanup spec file:
  + Correct License tag in keeping with spdx.org norms
  + Also package ChangeLog file in docdir
- Add Type=Application in stellarium_user_guide.desktop to prevent
  rpmlint warnings
- Install icons of various sizes in the hicolor icon directory;
  depends on ImageMagick
- Use BuildRequires: hicolor-icon-theme so that there is no need
  to separately own the hicolor icon theme directories; also use
  post install scripts to update the hicolor icon theme index.</changelog>
<changelog author="badshah400@gmail.com" date="1339416000">- Remove unnecessary file that creates a licensing problem from
  source (bnc#766373).</changelog>
<changelog author="idonmez@suse.com" date="1347969600">- Add explicit glu dependency</changelog>
<changelog author="badshah400@gmail.com" date="1349784000">- Update to version 0.11.4:
  + New features:
  - New plugin: Exoplanets
  - New plugin: Observability analysis
  - Get geometric altitude and azimuth for script engine (LP:
    [#1010617])
  - Sky image loading with altitude/azimuth coordinates (LP:
    [#1023548])
  - New hotkey for star name labels (LP: #1032989)
  - Option to activate/deactivate the Nebula Background Images
    button via GUI (LP: #925247)
  - Return to user set location and landscape (LP: #981507)
  - Display degrees and minutes for FOV of CCD (LP: #998761)
  - Adding all possible satellites (LP: #1006495)
  - Building a Windows x64 packages (LP: #1003041, #1027607)
  - Apply atmosphere effect only on bodies with atmosphere (LP:
    [#971875])
  + Fixed:
  - Various Stellarium freezes and crashes (LP: #1005155,
    [#1030913], #940638, #992267, #1033380, #951967, #1040054)
  - Various plugins issues (LP: #751381, #892027, #1006134,
    [#1040066], #1040085)
  - Various issues for nebulae (LP: #1026021, #744517)
  - Add/subtract one sidereal year jumps wrong amount (LP:
    [#1006208])
  - Various small issues, typos and mistakes (LP: #1022506,
    [#1032469], #1019247, #985204)
  - Various issues in Scripting Engine (LP: #1023934, #1017148,
    [#1017154], #730180)
  + Changed:
  - New tab in the configuration window to control the selected
    object information
  - Improvement Night Vision mode
  - Extend list of default scripts.</changelog>
<changelog author="badshah400@gmail.com" date="1359633600">- Update to version 0.12.0 (bnc#801946):
  + New features:
  - New rendering engine (LP: #673183)
  - Editable keybindings (LP: #1098851, #1035635, #832256,
    [#789002])
  - Scripting for plugins (LP: #1040242)
  - Some transneptunian objects (LP: #899084, #1051205)
  - New geographical locations (LP: #1051803)
  - New textures for DSO
  - DeltaT and lunar acceleration computation (LP: #575621)
  + Improvements:
  - Improving the scripting engine (LP: #1059368)
  - Improving the plugins (LP: #1082167, #1042714)
  - Improving the coordinate grids (LP: #1036294)
  - Improving the constellation boundaries (LP: #1039072)
  - Improving the search tool
  + Bug fixes:
  - Clang Wself-assign warning during build process on some
    platforms (LP: #1097358)
  - Bugs in Observability plugin (LP: #1042059, #1054599,
    [#1053058])
  - Bugs in TUI plugin (LP: #1083380)
  - Bugs in Satellites plugin (LP: #1048220)
  - Bugs in Compass plugin (LP: #695891)
  - Bugs in scripting engine (LP: #1046518, #1092781)
  - Font corruption bugs (LP: #597633, #778747, #819278,
    [#903310])
  - Screen flashing in fullscreen mode (LP: #716695, #824788)
  - Lost nebula images (LP: #1042393, #1051038)
  - Bugs in Night Vision mode (LP: #578367)
  - Bugs in GUI and Core (LP: #1090722, #1082510, #1071455,
    [#1071458], #1056868, #1054600, #1045111, #1040944, #1077545)
  - Crashes (LP: #1043640, #1044654, #1045783)
- Drop outdated user guide from package, and corresponding
  .desktop file (the user guide is now on the wiki
  http://www.stellarium.org/wiki/index.php/Stellarium_User_Guide)
- Drop build dependency on ImageMagick, as the install script now
  automatically installs prepackaged icons in the hicolor
  directory
- Require qt &gt;= 4.8 and cmake &gt;= 2.8.7 for building.</changelog>

</package>
<package pkgid="1c4aae4aafb61bd447f0f6cb0e0949e9946f6ebb4fa49db956210f4b9e2ab3ea" name="apcupsd" arch="src">
    <version epoch="0" ver="3.14.10" rel="3.4.5"/>

<changelog author="seife@opensuse.org" date="1266235200">- fix build with newer net-snmp by undefining MIB</changelog>
<changelog author="seife@opensuse.org" date="1266235200">- add missing hal directories to pass rpmlint checks</changelog>
<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905600">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905600">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>

</package>
<package pkgid="df20c13be971a3c0e078460915b9fa05034a0ba63615efe09852ee4ddafb4b18" name="java-1_7_0-openjdk" arch="src">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="798a68b2602211831a1f4b73417a7c333185580b97ac13dab0717a288c14169f" name="pidgin" arch="src">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="ab55561e1ad2787bcf4d6261804b747d8c832b5b43eb25869771d606db47bee1" name="typo3-cms-4_5" arch="src">
    <version epoch="0" ver="4.5.25" rel="2.4.1"/>

<changelog author="Thomas.Worm@DATEV.de" date="1346932800">- Initial package version 4.5.19</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1347019200">- Changed installation directory from /usr/share/typo3-4.5 to
  /usr/share/typo3-4_5.
- Added PHP requirements to spec file.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1351080000">- Raised to version 4.5.20
  * Raise submodule pointer
  * Update md5 sums for 4.5.20
  * Update backend sprites according to rebranding
  * Introduce "TYPO3 CMS" in EXT: about (t3#41823)
  * Adjust Logos to new style-guide (t3#41704)
  * Prevent saltedpasswords destroying the password (t3#41828)
  * bugfix: RTE: Paste as plain text doesn't work in
    Safari (Mac only) (t3#35356)
  * bugfix: CE with "All languages" doesn't show with every lang (t3#24087)
  * bugfix: CE with "All languages" isn't shown in Page module (t3#24087)
  * bugfix: Proper cursor icon in access module (t3#33230)
  * bugfix: Fix the additional icon check (t3#41463)
  * bugfix: Fix translation moving in workspaces (t3#33592)
  * bugfix: strftime expects parameter 2 to be long, string given (t3#38717)
  * bugfix: RTE: array_flip warning on array of languages (t3#35147)
  * bugfix: Words with special characters not added to personal
    dictionary (t3#38653)
  * bugfix: htmlArea RTE: Cursor jumps to first letter with Chrome 22 (t3#41411)
  * bugfix: Do not save expand state for root node in TCA tree (t3#31978)
  * bugfix: File upload button is collapsed in Chrome 21 (t3#39659)
  * bugfix: Switch to List module on root page leads to blank page (t3#40781)
  * bugfix: Error handler registration accepts way too much PHP error
    types (t3#31827)
  * bugfix: Tree view in admin panel is broken with PHP 5.4 (t3#41213)
  * bugfix: Error handler callback causes fatal error for parse time
    errors (t3#31834)
  * bugfix: Error messages are not shown in 123 installation process (t3#41158)
  * bugfix: Database creating fails due to not allowed characters (t3#41151)
  * bugfix: Set charset property after cloning t3lib_PageRenderer (t3#27957)
  * bugfix: PHP warning when no language pack is available (t3#40108)
  * Set TYPO3 version to 4.5.20-dev
  * dbal: Update md5 sum for 4.5.20
  * extbase: Update version number to 1.3.4
  * extbase, bugfix: (Persistence) Make Typo3QuerySettings exchangeable
  * extbase, bugfix: Declare LocalizationUtility::translateFileReference static
  * fluid: Update version number to 1.3.1
  * fluid, bugfix: Return empty result in pagination if page does not exist
  * linkvalidator: Raise version number for 4.5.20
  * linkvalidator, bugfix: Field name 'location' is case insensitive (t3#40486)
  * version: Raise version number for 4.5.20
  * workspaces: Raise version number for 4.5.20
  * workspaces, feature: set default grid limit to 30 (t3#26287)
- Renamed package from typo3-4_5 to typo3-cms-4_5 due to name change of
  software product.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1352808000">- Raised to version 4.5.22
  * Raise submodule pointer (TYPO3 Release Team)
  * Raise version numbers of system extensions (Steffen Ritter)
  * bugfix: imagecopyresized: correct invalid parameters (Stefan Neufeind), t3#26660
  * Fix TYPO3 logos (Helmut Hummel), t3#42850
  * Raise submodule pointer (TYPO3 Release Team)
  * bugfix: t3#42812 Most checkboxes (like Extended View) are not working (Michael Spä), t3#42812
  * Set TYPO3 version to 4.5.22-dev (TYPO3 Release Team)
  * security: Fix SQL injection and XSS in record history (Oliver Hader), t3#42696
  * security: XSS in TCA Tree (Oliver Hader), t3#42774
  * security: Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel), t3#42776
  * Raise submodule pointer (TYPO3 Release Team)
  * bugfix: No sorting in TypoScript Object Browser when browsing (Nicole Cordes), t3#39677
  * bugfix: Translated non-published page in workspace breaks live workspace (Oliver Hader), t3#42281
  * bugfix: Illegal string offsets in t3lib_stdgraphic (Wouter Wolters), t3#38024
  * bugfix: PHP 5.4 warning in CLI context in switch back user (Christian Kuhn), t3#37578
  * bugfix: t3lib_div: adjust substUrlsInPlainText to also work on URLs at end of sentence (Robert Heel), t3#28248
  * bugfix: Wrong call to TSFE in FrontendEditing (Steffen Ritter), t3#40733
  * Fix generation of ext_emconf.php (Wouter Wolters), t3#42444
  * bugfix: t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland), t3#38699
  * bugfix: TCEForms.Suggest wizard in IRRE records (Nicole Cordes), t3#27020
  * Fix case of tests folder (Xavier Perseguers)
  * bugfix: Unit test for saltedpasswords fail (Xavier Perseguers)
  * bugfix: RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland), t3#36087
  * bugfix: RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland), t3#29685
  * bugfix: Extension Import not working with postgresql and DBAL (Ernesto Baschny), t3#38406
  * Set TYPO3 version to 4.5.21-dev (TYPO3 Release Team)</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised to version 4.5.23
  * Raise submodule pointer
  * bugfix: t3lib_iconWorks must check if array exists before using it, t3#24248
  * bugfix: BE user switch impossible when in adminOnly mode, t3#32686
  * bugfix: Excludefieds must exclude admin only tables, t3#34460
  * bugfix: TypoLink: absolute urls when installed in subfolder, t3#33214
  * Raise submodule pointer
  * bugfix: [Cache][PDO] Duplicate cache entry possible, t3#34129
  * bugfix: IE9 compatibility clear cache menu, t3#36364
  * bugfix: Hook call modifyDBRow in ContentContentObject, t3#44416
  * bugfix: Fix misspelling in RTE meta menu, t3#43886
  * bugfix: load TCA before manipulation, t3#38505
  * DataHandler::getAutoVersionId() should be public, t3#45050
  * bugfix: Load date-time picker in scheduler module, t3#31027
  * bugfix: Quick Edit triggers warnings of missing key uid, t3#42845
  * Raise submodule pointer
  * bugfix: Fix warnings in em on tab Maintenance, t3#39680
  * bugfix: Correct TCA inclusion for uploads rendering, t3#44145
  * bugfix: Update description on changed error reporting defaults, t3#38240
  * bugfix: Fix typos in stdWrap_crop description, t3#43919
  * bugfix: Apc Cache backend has side effects, t3#38135
  * bugfix: Invalid call to t3lib_TCEmain::processRemapStack(), t3#44301
  * Raise submodule pointer
  * bugfix: Suggest wizard is behind form inputs, t3#42092
  * bugfix: phpdoc: $urlParameters can be a string, t3#44263
  * bugfix: FE session records are never removed, t3#34964
  * bugfix: INTincScript_loadJSCode() causes PHP warnings, t3#32278
  * bugfix: Enable the RTE with WebKit version 534 on iOS and Android, t3#43603
  * bugfix: Remove HTML in RuntimeException from sysext 'install', t3#38472
  * bugfix: Fix wrong column title in web&gt;list for field colpos, t3#25113
  * bugfix: SqlParser: trim all kinds of whitespaces, t3#43470
  * Remove typo3.pageModule.js, t3#43459
  * bugfix: Installer: Reference images wrong, t3#42292
  * bugfix: Page Information shows incorrect number of total hits, t3#41608
  * bugfix: Old logo on "Install Tool is locked" page, t3#42908
  * openid: Update php-openid to 2.2.2, t3#42236
  * Group excludefields by table, t3#34098
  * bugfix: Hide version selector if workspaces are used, t3#43264
  * Raise submodule pointer</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised to version 4.5.24
  * Raise submodule pointer (TYPO3 Release Team)
  * security: Open redirection with jumpurl (Franz G. Jahn), t3#28587, bnc#808528, CVE-2013-1843
  * bugfix: Check minitems for TCAtree (Georg Ringer), t3#25003
  * bugfix: Keep hyphens in custom HTML5 attributes (Jigal van Hemert), t3#34371
  * Revert "[BUGFIX] FE session records are never removed" (Oliver Hader), t3#45570
- security fix: Typo3 Extbase Framework SQL Injection, bnc#808528, CVE-2013-1842</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362830400">- Raised to version 4.5.25
  * bugfix: External URL regression by jumpurl security fix (Helmut Hummel), t3#46071</changelog>

</package>
<package pkgid="ebb601e3e229da5ead25579d60c3e72efae91f7ad4eec92df1a08b685148db3b" name="typo3-cms-4_6" arch="src">
    <version epoch="0" ver="4.6.18" rel="2.4.1"/>

<changelog author="Thomas.Worm@DATEV.de" date="1346932800">- Initial package version 4.6.12</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1347019200">- Changed installation directory from /usr/share/typo3-4.6 to
  /usr/share/typo3-4_6.
- Added PHP requirements to spec file.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1351080000">- Raised version to 4.6.13
  * Update md5 sums for 4.6.13
  * Update backend sprites according to rebranding
  * bugfix: Localization fallback does not work in Backend (t3#41996)
  * Adjust Logos to new style-guide (t3#41704)
  * bugfix: BE user switch impossible when in adminOnly mode (t3#32686)
  * bugfix: Validation of umlaut URLs and mail addresses (t3#30311)
  * bugfix: Excludefieds must exclude admin only tables (t3#34460)
  * bugfix: undefined variable imgExt (t3#34446)
  * bugfix: t3lib_iconWorks must check if array exists before using it
    (t3#24248)
  * Introduce "TYPO3 CMS" in EXT: about (t3#41823)
  * bugfix: Make generated thumbnails browser-cachable (t3#21481)
  * bugfix: TCEForms.Suggest wizard in IRRE records (t3#27020)
  * bugfix: Warning in list module (t3#39678)
  * bugfix: Endless loop in flushOutputBuffers() (t3#40126)
  * bugfix: Take versioned record into account for showHidden flag. (t3#33392)
  * bugfix: Fix SQL error in Livesearch with empty TCA sortby setting (t3#40816)
  * bugfix: Pagetree - Prevent a call to moveNode while creating nodes
    (t3#39820)
  * bugfix: FLUIDTEMPLATE - Serialization of 'Closure' is not allowed (t3#36820)
  * bugfix: Prevent saltedpasswords destroying the password (t3#41828)
  * bugfix: RTE: Localization to content language does not work (t3#39271)
  * bugfix: imagecopyresized: correct invalid parameters (t3#26660)
  * bugfix: RTE: Paste as plain text doesn't work in Safari (Mac only)
    (t3#35356)
  * bugfix: CE with "All languages" doesn't show with every lang (t3#24087)
  * bugfix: CE with "All languages" isn't shown in Page module (t3#24087)
  * bugfix: Proper cursor icon in access module (t3#33230)
  * Group excludefields by table (t3#34098)
  * bugfix: User settings don't remember that default language is selected
    (t3#31943)
  * bugfix: Make alphanum. filter work with umlauts (t3#35284)
  * bugfix: Fix the additional icon check (t3#41463)
  * bugfix: Fix translation moving in workspaces (t3#33592)
  * bugfix: strftime expects parameter 2 to be long, string given (t3#38717)
  * bugfix: RTE: array_flip warning on array of languages (t3#35147)
  * bugfix: Fix compressor flooding typo3temp (t3#40409)
  * bugfix: JS error in IE7 while starting RTE (t3#40082)
  * bugfix:  Words with special characters not added to personal dictionary
    (t3#38653)
  * bugfix: RTE is not loading in IE8, when used with feedit (t3#40558)
  * bugfix: htmlArea RTE: Cursor jumps to first letter with Chrome 22
    (t3#41411)
  * bugfix: Do not save expand state for root node in TCA tree (t3#31978)
  * bugfix: File upload button is collapsed in Chrome 21 (t3#39659)
  * bugfix: Switch to List module on root page leads to blank page (t3#40781)
  * bugfix: Error handler registration accepts way too much PHP error types
    (t3#31827)
  * bugfix: Tree view in admin panel is broken with PHP 5.4 (t3#41213)
  * bugfix: Error handler callback causes fatal error for parse time errors
    (t3#31834)
  * bugfix: Error messages are not shown in 123 installation process (t3#41158)
  * bugfix: Database creating fails due to not allowed characters (t3#41151)
  * bugfix: autoloader should ignore non existing extensions (t3#39649)
  * bugfix: Link to install tool in reports leads to old page (t3#37067)
  * bugfix: pi_getLL() alternative language translation fails (t3#39850)
  * bugfix: L10n PHP parser stores NULL for unknown key (t3#40643)
  * bugfix: L10n parser interface is wrongly defined (t3#40641)
  * bugfix: Compressor: filemtime(): stat failed in Help &gt; About TYPO3
    (t3#35212)
  * bugfix: Set charset property after cloning t3lib_PageRenderer (t3#27957)
  * revert: Invalid fallback for non-localized labels" (t3#39814)
  * bugfix: PHP warning when no language pack is available (t3#40108)
  * bugfix: Multi-table relationship not recognized in t3lib_loadDBGroup
    (t3#34148)
  * Set TYPO3 version to 4.6.13-dev
  * dbal: Update md5 sum for 4.6.13
  * extbase: Update version number to 1.4.5
  * extbase, bugfix: Fix translation fallback
  * extbase, bugfix: Declare LocalizationUtility::translateFileReference static
  * fluid: Update version number to 1.4.2
  * fluid, bugfix: Return empty result in pagination if page does not exist
  * linkvalidator: Update md5 sum for 4.6.13
  * version: Update version number to 4.6.13
  * workspaces: Update version number to 4.6.13
- Renamed package from typo3-4_6 to typo3-cms-4_6 due to name change of
  software product.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1352808000">- Raised version to 4.6.15
  * Raise version numbers of system extensions (Steffen Ritter)
  * bugfix: imagecopyresized: correct invalid parameters (Stefan Neufeind), t3#26660
  * Fix TYPO3 logos (Helmut Hummel), t3#42850
  * bugfix: t3#42812 Most checkboxes (like Extended View) are not working (Michael Spä), t3#42812
  * security: Fix SQL injection and XSS in record history (Oliver Hader), t3#42696
  * security: XSS in TCA Tree (Oliver Hader), t3#42774
  * security: Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel), t3#42776
  * Raise submodule pointer (TYPO3 Release Team)
  * bugfix: No sorting in TypoScript Object Browser when browsing (Nicole Cordes), t3#39677
  * bugfix: Translated non-published page in workspace breaks live workspace (Oliver Hader), t3#42281
  * bugfix: Illegal string offsets in t3lib_stdgraphic (Wouter Wolters), t3#38024
  * bugfix: PHP 5.4 warning in CLI context in switch back user (Christian Kuhn), t3#37578
  * bugfix: t3lib_div: adjust substUrlsInPlainText to also work on URLs at end of sentence (Robert Heel), t3#28248
  * bugfix: Wrong call to TSFE in FrontendEditing (Steffen Ritter), t3#40733
  * bugfix: PHP warning: open_basedir restriction (Xavier Perseguers), t3#42054
  * Fix generation of ext_emconf.php (Wouter Wolters), t3#42444
  * bugfix: t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland), t3#38699
  * bugfix: New form wizard not loading in IE8 (Sebastian Schawohl), t3#33504
  * bugfix: Fix case of tests folder (Xavier Perseguers)
  * bugfix: Unit test for saltedpasswords fail (Xavier Perseguers)
  * bugfix: RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland), t3#36087
  * bugfix: RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland), t3#29685
  * bugfix: Extension Import not working with postgresql and DBAL (Ernesto Baschny), t3#38406
  * bugfix: Creating new pages via drag'n'drop respects page TS (Philipp Kitzberger), t3#25021
  * Set TYPO3 version to 4.6.14-dev (TYPO3 Release Team)</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised version to 4.6.16
  * bugfix: L10n fallback does not work for TS labels, t3#44099
  * bugfix: L10n fallback does not work for ExtJS in BE, t3#44273
  * Raise submodule pointer
  * bugfix: Allow "en" as language key, t3#42084
  * Raise submodule pointer
  * bugfix: [Cache][PDO] Duplicate cache entry possible, t3#34129
  * bugfix: IE9 compatibility clear cache menu, t3#36364
  * bugfix: Hook call modifyDBRow in ContentContentObject, t3#44416
  * bugfix: Fix misspelling in RTE meta menu, t3#43886
  * bugfix: load TCA before manipulation, t3#38505
  * bugfix: add check for empty form values in FORM View, t3#28606
  * DataHandler::getAutoVersionId() should be public, t3#45050
  * bugfix: Quick Edit triggers warnings of missing key uid, t3#42845
  * Raise submodule pointer
  * bugfix: Fix warnings in em on tab Maintenance, t3#39680
  * bugfix: Correct TCA inclusion for uploads rendering, t3#44145
  * bugfix: Update description on changed error reporting defaults, t3#38240
  * bugfix: Fix typos in stdWrap_crop description, t3#43919
  * bugfix: Apc Cache backend has side effects, t3#38135
  * bugfix: Invalid call to t3lib_TCEmain::processRemapStack(), t3#44301
  * Raise submodule pointer
  * bugfix: Suggest wizard is behind form inputs, t3#42092
  * bugfix: phpdoc: $urlParameters can be a string, t3#44263
  * bugfix: FE session records are never removed, t3#34964
  * bugfix: INTincScript_loadJSCode() causes PHP warnings, t3#32278
  * bugfix: Fix broken logo file in Install Tool, t3#43426
  * bugfix: Remove HTML in RuntimeException from sysext 'install', t3#38472
  * bugfix: Fix wrong column title in web&gt;list for field colpos, t3#25113
  * bugfix: SqlParser: trim all kinds of whitespaces, t3#43470
  * Remove typo3.pageModule.js, t3#43459
  * bugfix: Installer: Reference images wrong, t3#42292
  * bugfix: Page Information shows incorrect number of total hits, t3#41608
  * bugfix: Old logo on "Install Tool is locked" page, t3#42908
  * bugfix: Form values with newlines escaped in email, t3#32515
  * openid: Update php-openid to 2.2.2, t3#42236
  * bugfix: Wizard in HTML element moved to t3editor, t3#33813
  * bugfix: Livesearch toolbar should close others, t3#32890
  * bugfix: Hide version selector if workspaces are used, t3#43264
  * bugfix: Subject field in FormWizard, t3#35787
  * Raise submodule pointer
  * bugfix: Invalid behavior of search for integer in Backend search, t3#33700
  * fluid, bugfix: Unit test fails with broken timezone, t3#45285
  * fluid, bugfix: Date ViewHelper not using configured Timezones, t3#12769
  * fluid, bugfix: Fix typo and improve backup of system settings, t3#45218
  * fluid, bugfix: Remove PHP Error caused by setlocale call, t3#45118
  * fluid, bugfix: Incomplete locale backup in unit test, t3#44835
  * fluid, bugfix: selectViewHelper sorting should respect locales, t3#43445
  * fluid, bugfix: Image viewhelper clears $GLOBALS['TSFE'] in backend context, t3#43446
  * fluid, bugfix: AbstractFormFieldViewHelper always converts entities, t3#34091
  * linkvalidator, bugfix: SQL error in getLinkCounts, t3#43322
  * version, bugfix: Catchable fatal error when using the swap button, t3#42948</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised version to 4.6.17
  * Raise submodule pointer (TYPO3 Release Team)
  * security: Open redirection with jumpurl (Franz G. Jahn), t3#28587, bnc#808528, CVE-2013-1843
- security fix: Typo3 Extbase Framework SQL Injection, bnc#808528, CVE-2013-1842</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362830400">- Raised verstion to 4.6.18
  * bugfix: External URL regression by jumpurl security fix (Helmut Hummel), t3#46071</changelog>

</package>
<package pkgid="9edf97ae23f6b08aae66bc79379a4bd020ff01c28e4df241fdf2bc888611264f" name="typo3-cms-4_7" arch="src">
    <version epoch="0" ver="4.7.10" rel="2.4.1"/>

<changelog author="Thomas.Worm@DATEV.de" date="1346932800">- Initial package version 4.7.4</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1347019200">- Changed installation directory from /usr/share/typo3-4.7 to
  /usr/share/typo3-4_7.
- Added PHP requirements to spec file.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1351080000">- Raised to version 4.7.5
  * Raise submodule pointer
  * Update version number to 4.7.5
  * bugfix: Localization fallback does not work in Backend (t3#41996)
  * Update backend sprites according to rebranding
  * Adjust Logos to new style-guide (t3#41704)
  * Introduce "TYPO3 CMS" in EXT: about (t3#41823)
  * bugfix: Prevent saltedpasswords destroying the password (t3#41828)
  * bugfix: RTE: Localization to content language does not work (t3#39271)
  * bugfix: RTE: paste as plain text does not work in IE9 (t3#39389)
  * bugfix: CE with "All languages" doesn't show with every lang (t3#24087)
  * bugfix: Fix the additional icon check (t3#41463)
  * bugfix: FLUIDTEMPLATE - Serialization of 'Closure' is not allowed (t3#36820)
  * bugfix: Make alphabetic filter work with umlauts (t3#35296)
  * bugfix: Pagetree - Prevent a call to moveNode while creating nodes
    (t3#39820)
  * bugfix: Make alphanum. filter work with umlauts (t3#35284)
  * feature: Add several testcases for validators (t3#35333)
  * bugfix: Fix SQL error in Livesearch with empty TCA sortby setting (t3#40816)
  * bugfix: Take versioned record into account for showHidden flag. (t3#33392)
  * Disable Memcache tests for now
  * bugfix: Endless loop in flushOutputBuffers() (t3#40126)
  * bugfix: MEDIA element ignores audio fallback (t3#39416)
  * bugfix: Hardcoded fileadmin directory in Import-Export (t3#41120)
  * bugfix: CE with "All languages" isn't shown in Page module (t3#24087)
  * bugfix: backColor transparent causes black background or flickering
    (t3#32781)
  * bugfix: strftime expects parameter 2 to be long, string given (t3#38717)
  * bugfix: Fix compressor flooding typo3temp (t3#40409)
  * Start memcached on travis-ci build
  * bugfix: Words with special characters not added to personal dictionary
    (t3#38653)
  * bugfix: RTE is not loading in IE8, when used with feedit (t3#40558)
  * bugfix: htmlArea RTE: Cursor jumps to first letter with Chrome 22 (t3#41411)
  * bugfix: *_user table password field is to short (t3#39356)
  * bugfix: Do not save expand state for root node in TCA tree (t3#31978)
  * bugfix: File upload button is collapsed in Chrome 21 (t3#39659)
  * bugfix: Error handler registration accepts way too much PHP error types
    (t3#31827)
  * bugfix: Tree view in admin panel is broken with PHP 5.4 (t3#41213)
  * bugfix: Error handler callback causes fatal error for parse time errors
    (t3#31834)
  * bugfix: Follow-up to GeneralUtility::logDeprecatedFunction() (t3#40521)
  * bugfix: Fatal error in GeneralUtility::logDeprecatedFunction() (t3#40521)
  * bugfix: Error messages are not shown in 123 installation process (t3#41158)
  * Database creating fails due to not allowed characters (t3#41151)
  * bugfix: autoloader should ignore non existing extensions (t3#39649)
  * bugfix: Switch to List module on root page leads to blank page (t3#40781)
  * bugfix: Link to install tool in reports leads to old page (t3#37067)
  * bugfix: pi_getLL() alternative language translation fails (t3#39850)
  * bugfix: L10n PHP parser stores NULL for unknown key (t3#40643)
  * bugfix: L10n parser interface is wrongly defined (t3#40641)
  * bugfix: Compressor: filemtime(): stat failed in Help &gt; About TYPO3
    (t3#35212)
  * bugfix: Set charset property after cloning t3lib_PageRenderer (t3#27957)
  * revert: Invalid fallback for non-localized labels (t3#39814)
  * bugfix: config.pageTitleSeparator not known by t3editor (t3#39600)
  * bugfix: PHP warning when no language pack is available (t3#40108)
  * bugfix: Warning in list module (t3#39678)
  * Set TYPO3 version to 4.7.5-dev
  * dbal: Update version number to 4.7.5
  * extbase: Update version number to 4.7.5
  * extbase: phpdoc-fixes
  * extbase, bugfix: Fix translation fallback
  * extbase, bugfix: Declare LocalizationUtility::translateFileReference static   * extbase, bugfix: ObjectManager dependencies in SignalSlot registration
  * extbase, bugfix: Possible failure in dependency injection
  * fluid: Update version number to 4.7.5
  * fluid, bugfix: Return empty result in pagination if page does not exist
  * linkvalidator: Update version number to 4.7.5
  * version: Update version number to 4.7.5
  * revert: Sent notification when changes are published
  * workspaces: Update version number to 4.7.5
- Renamed package from typo3-4_7 to typo3-cms-4_7 due to name change of
  software product.</changelog>
<changelog author="Thomas.Worm@DATEV.de" date="1352808000">- Raised to version 4.7.7
  * Raise version numbers of system extensions (Steffen Ritter)
  * bugfix: Regression in t3lib_iconWorks::imagecopyresized (Tymoteusz Motylewski), t3#39563
  * Fix TYPO3 logos (Helmut Hummel), t3#42850
  * bugfix: getFuncCheck must quotes wrong (Michael Spä), t3#42812
  * security: Fix SQL injection and XSS in record history (Oliver Hader)
  * security: XSS in TCA Tree (Oliver Hader), t3#42696
  * security: Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel), t3#42774
  * Raise submodule pointer (TYPO3 Release Team), t3#42776
  * bugfix: No sorting in TypoScript Object Browser when browsing (Nicole Cordes), t3#39677
  * bugfix: Translated non-published page in workspace breaks live workspace (Oliver Hader), t3#42281
  * bugfix: Illegal string offsets in t3lib_stdgraphic (Wouter Wolters), t3#38024
  * Use correct branch for travis integration build (Helmut Hummel)
  * bugfix: PHP 5.4 warning in CLI context in switch back user (Christian Kuhn), t3#37578
  * bugfix: RTE: Link class not always set in Firefox (Stanislas Rolland), t3#39662
  * bugfix: Restore display of mount points path (Francois Suter), t3#42046
  * bugfix: Wrong call to TSFE in FrontendEditing (Steffen Ritter), t3#40733
  * bugfix: PHP warning: open_basedir restriction (Xavier Perseguers), t3#42054
  * bugfix: Fix usage of fileadminDir (Helmut Hummel), t3#42454
  * Fix generation of ext_emconf.php (Wouter Wolters), t3#42444
  * Clean-up EXT: aboutmodules, adapt to "TYPO3 CMS" (Felix Kopp), t3#41980
  * bugfix: t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland), t3#38699
  * bugfix: New form wizard not loading in IE8 (Sebastian Schawohl), t3#33504
  * bugfix: Unit test for saltedpasswords fail (Xavier Perseguers)
  * bugfix: RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland), t3#36087
  * bugfix: RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland), t3#29685
  * bugfix: Extension Import not working with postgresql and DBAL (Ernesto Baschny), t3#38406
  * Set TYPO3 version to 4.7.6-dev (TYPO3 Release Team)
- Added some fixes to work with PHP 5.4</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362484800">- Raised to version 4.7.8
  * bugfix: L10n fallback does not work for TS labels, t3#44099
  * bugfix: L10n fallback does not work for ExtJS in BE, t3#44273
  * Raise submodule pointer
  * bugix: Allow "en" as language key, t3#42084
  * Raise submodule pointer
  * bugfix: [Cache][PDO] Duplicate cache entry possible, t3#34129
  * bugfix: IE9 compatibility clear cache menu, t3#36364
  * bugfix: Hook call modifyDBRow in ContentContentObject, t3#44416
  * bugfix: Fix misspelling in RTE meta menu, t3#43886
  * bugfix: load TCA before manipulation, t3#38505
  * bugfix: add check for empty form values in FORM View, t3#28606
  * DataHandler::getAutoVersionId() should be public, t3#45050
  * bugfix: Possible warning in about module, t3#44892
  * bugfix: Quick Edit triggers warnings of missing key uid, t3#42845
  * Raise submodule pointer
  * bugfix: Fix warnings in em on tab Maintenance, t3#39680
  * bugfix: EXT:felogin: Multiple bugs with preserveGETvars, t3#19938
  * bugfix: Correct TCA inclusion for uploads rendering, t3#44145
  * bugfix: array_merge_recursive_overrule: __UNSET for array values, t3#43874
  * bugfix: Update description on changed error reporting defaults, t3#38240
  * bugfix: Fix typos in stdWrap_crop description, t3#43919
  * Add save only button to Scheduler task, t3#44152
  * bugfix: Apc Cache backend has side effects, t3#38135
  * bugfix: Invalid call to t3lib_TCEmain::processRemapStack(), t3#44301
  * Raise submodule pointer
  * Suggest wizard is behind form inputs, t3#42092
  * bugfix: phpdoc: $urlParameters can be a string, t3#44263
  * bugfix: FE session records are never removed, t3#34964
  * bugfix: INTincScript_loadJSCode() causes PHP warnings, t3#32278
  * bugfix: Fix broken logo file in Install Tool, t3#43426
  * bugfix: Enable the RTE with WebKit version 534 on iOS and Android, t3#43603
  * bugfix: IE9 crashes after saving with RTE, t3#43766
  * bugfix: Remove HTML in RuntimeException from sysext 'install', t3#38472
  * bugfix: Compatibility fix for get_html_translation_table(), t3#39287
  * bugfix: Fix wrong column title in web&gt;list for field colpos, t3#25113
  * bugfix: SqlParser: trim all kinds of whitespaces, t3#43470
  * Remove typo3.pageModule.js, t3#43459
  * bugfix: Installer: Reference images wrong, t3#42292
  * bugfix: Page Information shows incorrect number of total hits, t3#41608
  * bugfix: Old logo on "Install Tool is locked" page, t3#42908
  * bugfix: Form values with newlines escaped in email, t3#32515
  * openid: Update php-openid to 2.2.2, t3#42236
  * bugfix: Hide version selector if workspaces are used. t3#43264
  * bugfix: Subject field in FormWizard, t3#35787
  * Raise submodule pointer
  * Invalid behavior of search for integer in Backend search, t3#33700</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Raised to version 4.7.9
  * Raise submodule pointer (TYPO3 Release Team)
  * security: Open redirection with jumpurl (Franz G. Jahn), t3#28587, bnc#808528, CVE-2013-1843
  * bugfix: Invalid RSA key when submitting form twice (Benjamin Mack), t3#40085
- security fix: Typo3 Extbase Framework SQL Injection, bnc#808528, CVE-2013-1842</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362571200">- Added rpmlintrc to suppress duplicated files warning.</changelog>
<changelog author="thomas.worm@thomas-worm.de" date="1362830400">- Raised to version 4.7.10
  * bugfix: External URL regression by jumpurl security fix (Helmut Hummel), t3#46071</changelog>

</package>
<package pkgid="715883fc8c32bb54de834100817669ddf6b94e11bf5494d3786ef202e8ba5531" name="freeradius-server" arch="src">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="4d805abd8265711e9c4bf222e5c0b1e812c611f4e28b18442d70910a2c7aa0f4" name="nss_ldap" arch="src">
    <version epoch="0" ver="265" rel="19.5.1"/>

<changelog author="rhafer@suse.de" date="1186142400">- Update to nss_ldap-257. (Just includes the fix for Bug #294456)</changelog>
<changelog author="rhafer@suse.de" date="1192708800">- Update to nss_ldap-258
  * fix for PADL-Bug#343: nss_srv_domain should take a domain
    not a record
  * fix for PADL-Bug#339: replacement code for Kerbeors
    SASL operations
  * fix for PADL-Bug#338: nss_ldap constructs LDAP URIs
    incorrectly
  * fix for PADL-Bug#337: configure fails to detect resolver
    functions
  * fix for PADL-Bug#332: --enable-schema-mapping incorrectly
    maps pw_change
  * fix for PADL-Bug#293: add nss_getgrent_skipmembers
    parameter to ldap.conf, if enabled will not request
    member attributes for group lookups, greatly increasing
    performance for large groups</changelog>
<changelog author="rhafer@suse.de" date="1193659200">- Update to nss_ldap-259
  * fix for BUG#348: fix memory leak
  * fix for BUG#349: nss_ldap crashes after START_TLS timeout
    (assertion failure in libldap)
  * fix for BUG#350: assertion failure in ldap_result (called
    from do_result())
  * fix for BUG#351: double ldap_msgfree()</changelog>
<changelog author="rhafer@suse.de" date="1194523200">- Fixed pre-requires</changelog>
<changelog author="rhafer@suse.de" date="1204632000">- Update to nss_ldap-260:
  * only set errno for NSS_TRYAGAIN (bnc#366587)
- removed obsolete sigset.dif patch</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="rhafer@suse.de" date="1219924800">- Update to nss_ldap-262, fixes a minor bug in the default
  config file (PADL-Bug#371) and a build issue on Solaris
  (PADL-Bug#370)</changelog>
<changelog author="rhafer@suse.de" date="1225195200">- Only set default port when "port" directive is present in
  /etc/ldap.conf or when "ssl on" is set. (bnc#439449)
- Apply "tls_*" options when "ldaps" URI are used (bnc#439449)</changelog>
<changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="rhafer@novell.com" date="1242734400">- updated to nss_ldap-264. From the changelog:
  * fix for PADL-Bug#378: MAP_H_ERRNO() should map NSS_TRYAGAIN
    to NETDB_INTERNAL not TRY_AGAIN
  * fix for PADL-Bug#379: ldaps:// URIs only work if "ssl on"
    is set
  * fix for PADL-Bug#248: nss_ldap exposes malformed entries to the
    system
  * fix for PADL-Bug#374: nss_ldap returns success from setnetgrent()
    when the requested netgroup doesn't exist
  * fix for PADL-Bug#376: getXXent() only returns NULL once before
    implicitly calling setXXent(), whereas other backends continue
    to return NULL</changelog>
<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="rhafer@novell.com" date="1260878400">- Update to nss_ldap-265. From the changelog:
  * fix for PADL-Bug#132: add versioning information to binary
  * fix for PADL-Bug#403: add AM_MAINTAINER_MODE
  * fix for PADL-Bug#388: bad LDAP query for ether lookups
  * fix for PADL-Bug#391: clarify bind timelimit defaults
    in ldap.conf
  * fix for PADL-Bug#392: call do_close() if ldap_result()
    or ldap_parse_result() fails (before returning
    NSS_UNAVAIL)
  * fix for PADL-Bug#409: deallocate context in
    _nss_ldap_ent_context_release() to avoid bad usage
  * fix for PADL-Bug#410: don't leak file descriptors in
    _nss_ldap_readconfig</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
<changelog author="rhafer@suse.de" date="1295265600">- A memory leak in nss_ldap could lead to processes (e.g. nscd)
  growing extremely large (bnc#659100, PADL-Bug#418)
- nss_ldap didn't try to reconnect properly when the LDAP
  connection was lost between two getXXent() calls
  (bnc#662752, PADL-Bug#215)</changelog>
<changelog author="rhafer@suse.de" date="1319803200">- Entries with invalid (or too large) uidNumber/gidNumber attributes
  could crash nss_ldap (bnc#726393)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1350561600">- fix build with possix correctly set (added to nss_ldap.dif)</changelog>
<changelog author="tchvatal@suse.com" date="1359374400">- Fix segfault when using with glibc-2.16 and linking with pthread.
  * adds patches:
    nss_ldap-265-glibc-2.16.patch (PADL-Bug#445)
    nss_ldap-265-pthread.patch (PADL-Bug#446)</changelog>
<changelog author="rhafer@suse.com" date="1363348800">- ldap.conf is now part of nss_ldap since pwdutils was dropped
  (bnc#809245)
- removed no longer needed %post scriptlet</changelog>

</package>
<package pkgid="66d35d6baabc6b5a10f86b0075d75a78782d7ab34a777b901ef0d99ab6744c64" name="xtrabackup" arch="src">
    <version epoch="0" ver="2.0.5" rel="2.4.1"/>

<changelog author="lenz@grimmer.com" date="1239278400">- Initial package added to the openSUSE Build Service (Version 0.5)
  Fri Mar 13 00:00:00 UTC 2009 - Vadim Tkachenko
- initial release</changelog>
<changelog author="lenz@grimmer.com" date="1241092800">- Update to version 0.6</changelog>
<changelog author="lenz@grimmer.com" date="1244548800">- Update to version 0.7</changelog>
<changelog author="andreas.stieger@gmx.de" date="1335355200">- add mysql-5.1.59.tar.gz
- add mysql-5.5.17.tar.gz
- add .changes file
- build with RPM_OPT_FLAGS
- update project URL
- add HTML documentation built from source
- update to upstream 2.0.0:
  * Percona XtraBackup can now save Galera replication information while
  performing a backup when given the --galera-info option to innobackupex.
  * XtraBackup now supports compressed backups. These backups can be done in a
  parallel way, thus utilizing multiple CPU cores if needed. In previous
  versions, compression was only possible with streaming backups + external
  (usually single-threaded) compression utilities, which also had a number of
  other limitations (e.g. could not be used with parallel file copying, it was
  required to uncompress the entire backup to restore a single table).
  * Percona XtraBackup now supports streaming incremental backups. In previous
  versions streaming backups were performed by the innobackupex script but
  incremental backups were done by the xtrabackup binary which calculated deltas
  by scanning data files. Which meant those two feature were mutually exclusive,
  i.e. one couldn’t do streaming incremental backups.
  * As part of the backup, the LRU dump is now included as well.
  * Support for compiling and running Percona XtraBackup against debug versions of
  InnoDB. This is only for very advancedusers.
- For fixes included in previous releases, see
  http://www.percona.com/doc/percona-xtrabackup/release-notes.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1338206400">- remove HTML documentation in favour of online documentation
  to fix factory build, also simplifies license.
- require cmake &gt;= 2.8.5 to catch this requirement in OBS earlier
  when building for SLE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1338292800">- cmake &gt;= 2.6.3 is the actual minimum requirement, fixes 11.4</changelog>
<changelog author="andreas.stieger@gmx.de" date="1341662400">- update to 2.0.1:
  * After creating a full compressed backup, performing a
    compressed/uncompressed incremental backup would fail because
    xtrabackup_checkpoints was compressed. This has been fixed by
    omitting xtrabackup_checkpoints from compression, so that a full
    backup could be used for incremental backups without decompression.
  * --copy-back was copying compressed *.qp files as well. This has been
    fixed by skipping the compressed files while copying the data back.
  * Streaming backups with --stream=tar would fail if the file size was
    bigger than 8GB. Fixed by changing the libarchive format from USTAR
    to restricted PAX which supports bigger file sizes.
  * innobackupex was  calling the tar utility unconditionally when
    streaming ib_lru_dump and xtrabackup_galera_info. Which led to a
    broken stream when the xbstream format was used.
  * when --compress was used together with --stream=tar, xtrabackup was
    silently creating a broken backup. Now it fails with an error
    instead, suggesting to either use xbstream, or don't use compression
    at all.
  * --safe-slave-backup was resulting in incorrect binlog info, because
    in some cases innobackupex confused the response from SHOW SLAVE
    STATUS with the one from SHOW MASTER STATUS.
  * xbstream would  sometimes fail while extracting the backup.
  * innodb_data_file_path was not written to backup-my.cnf, this was a
    regression introduced in previous version.
  * XtraBackup would fail to find the datadir when using mysqld_multi.
    This was fixed by adding new option --defaults-group, to both
    innobackupex and xtrabackup, now it can be specified which section
    of my.cnf to handle.
  * InnoDB tables with names containing: opt, par, CSV, MYD were backed
    up twice. These tables were backed up by xtrabackup binary and by
    innobackupex script. Regular expression for filtering database
    directory contents was fixed.
  * When run innobackupex with --apply-log, it was reading configuration
    from the server configuration file instead of backup-my.cnf in
    backup directory.
  * innobackupex could copy files to a wrong directory when merging an
    incremental backup to a full one.
  * Incremental backups were not working correctly with --stream=tar.
    This was fixed by making --incremental-lsn incompatible with
  - -stream=tar. XtraBackup will fail with an error message suggesting
    to use --stream=xbstream.
  * innobackupex failed to copy-back backup if destination dir wasn't
    empty. Exceptions were added for my.cnf and master.inf` as
    XtraBackup doesn't backup those files, so it won't overwrite
    anything.
  * innobackupex --copy-back could skip some files when copying from a
    Windows filesystem mounted over NFS.
  * XtraBackup binary was leaking file descriptors on --backup. This was
    fixed by reusing the existing file descriptor so no leak occurs.
  * There were no source files in tar.gz archive for Percona XtraBackup
    2.0.0.
  * XtraBackup|binary could fail with the log block checksum mismatch"
    error when reading an partially written log block.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343995200">- remove documentation from MySQL and xtrabackup tarballs due to license</changelog>
<changelog author="andreas.stieger@gmx.de" date="1344081600">- add xtrabackup-nodoc.sh to source package - removes documentation
  from pristine upstream source packages when maintaining package.
  Not used during build or in binary package.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1344945600">- update to 2.0.2
  * Fixed false positive test suite failures with grep 2.10
  * Incremental backup would fail if a tablespace was created
    between full and incremental backups.
  * Assertion error in creating a compressed tablespace at delta
    apply time has been fixed.
  * If the table was renamed after the full backup, but before the
    incremental backup has been taken, incremental backups would
    fail when being prepared.
  * When the variable innodb_log_block_size was set to 4096, backups
    would fail in the prepare stage.
  * Additional incremental backup tests have been added for the
    incremental backup data page copy.
- update percona-xtrabackup-2.0.2-nodoc.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to 2.0.3
- new features:
  * innobackupex now supports new --move-back option that can be used
    instead of --copy-back in case there isn’t enough free disk space
    on the server to copy files. As this option removes backup files,
    it must be used with caution.
- bug fixes:
  * Symlink for innobackupex-1.5.1 binary has been broken in the
    previous version of XtraBackup.
  * XtraBackup 2.0.2 was not backwards compatible which caused
    incremental backups created with previous versions to fail on
    prepare.
  * Fix a regression that may potentially lead to a 5x increase in
    disk space occupied by incremental backups.
  * Fix a regression which caused incorrect handling of compressed
    tablespaces with the page size of 16K, that were created between
    the last full or incremental and the next incremental backup.
- packaging changes:
  * improve upgrade from generic packages</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354708800">- update to 2.0.4
  + a regression introduced in XtraBackup 2.0.2 caused incremental
    backups to fail because the init parameter values were not
    normalized to the values used inside InnoDB
  + a regression introduced in traBackup 2.0.2 didn’t take the
    separate doublewrite tablespace into an account
  + XtraBackup was handling the separate doublewrite buffer file
    incorrectly. File path of the doublewrite buffer wasn’t added
    to the backup-my.cnf and after the restore old doublewrite buffer
    file was used instead of one made during the prepare stage
  + XtraBackup now accepts the --innodb=force option, previously it
    would throw an error if the option was set
  + Option safe-slave-backup wasn’t working correctly
  + In case safe-slave-backup-timeout was reached when using the
    safe-slave-backup option, SQL_THREAD was left in stopped state
    causing the slave thread to lag behind. This was fixed by
    checking the initial SQL_THREAD state and starting it before
    terminating with a timeout error and starting the SQL_THREAD
    only if it was running initially.
  + In case of streaming backups, innobackupex would resume the
    Xtrabackup process and then wait for it to finish before running
    UNLOCK TABLES. This caused database to be unnecessarily locked
    with FLUSH TABLES WITH READ LOCK. Innobackupex now waits only
    till log copying is finished to unlock the databases
  + XtraBackup would fail on --apply-log when filesystem didn’t
    support Linux AIO
  + XtraBackup binary would ignore innodb_use_native_aio when it’s
    specified either in my.cnf or as a command line option
  + XtraBackup would print a warning message during the prepare
    stage about innodb_file_io_threads being deprecated, even if the
    variable wasn’t set
  + XtraBackup Galera tests can now be run concurrently</changelog>
<changelog author="andreas.stieger@gmx.de" date="1363262400">- update to 2.0.5
- new features:
  + New option --defaults-extra-file to read options before the
    standard defaults-file, e.g. for separate username/passwords
    crontab or a script somewhere in the system.
- bugs fixed:
  + In case of streaming backups, innobackupex would resume the
    XtraBackup process and then wait for it to finish before
    running UNLOCK TABLES. This caused database to be unnecessarily
    locked with FLUSH TABLES WITH READ LOCK. Innobackupex now waits
    only till log copying is finished to unlock the databases.
  + innobackupex error messages referencing the data directory
    have been extended to show the path of the data directory
    mentioned in the error message.
  + Partitioned tables were not correctly handled by the
  - -databases, --include, --tables-file options of innobackupex,
    and by the --tables and --tables-file options of XtraBackup.
  + When built-in compression was used, XtraBackup was doing
    unbuffered writes to the destination file or stream in very
    small chunks which in return caused inefficient I/O.
  + Unnecessary long sleep() in innobackupex lead to FLUSH TABLES
    WITH READ LOCK taking too long.
  + If innobackupex would crash it would leave the xtrabackup_suspended
    file on the filesystem. This could then cause innobackupex to think
    XtraBackup has suspended itself the moment it started, and then when
    XtraBackup actually does suspend itself, innobackupex would wait for
    it to end and wouldn’t re-remove the suspend file, leading to a wait
    deadlock.
  + innobackupex would fail to recognize MariaDB 5.2 and MariaDB 5.3
- fix path of MySQL 5.5 xtrabackup binary [bnc#809505]</changelog>

</package>
<package pkgid="ac2a0137b3e53ced4521512734efd0c14547052056321e065dc77d70c8ca603d" name="pidgin-branding-openSUSE" arch="src">
    <version epoch="0" ver="12.2" rel="4.4.1"/>

<changelog author="vuntz@novell.com" date="1219838400">- New package to change pidgin default configuration.</changelog>
<changelog author="sbrabec@suse.cz" date="1223294400">- Conflict with other branding providers (FATE#304881).</changelog>
<changelog author="vuntz@opensuse.org" date="1296648000">- Bump version to 11.4.
- Provide the right version of pidgin-branding; add pidgin
  BuildRequires for this.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Bump version to 12.1.
- Update summary and description.
- Create a libpurple-branding-openSUSE subpackage, and do not build
  a pidgin-branding-openSUSE subpackage:
  + the configuration file is also important for other clients than
    pidgin, so we want to brand libpurple.
  + however, since there is also pidgin-related content in the same
    file, we also make libpurple-branding-openSUSE act as
    pidgin-branding-openSUSE (with Provides, Conflicts, Supplements
    that are usual for a branding package).
  + also add appropriate Provides/Obsoletes for
    pidgin-branding-openSUSE, for smooth upgrades.
- Add Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1318507200">- Remove %{release} from the pidgin versioned Requires, to not have
  to rebuild this package each time pidgin rebuilds to keep it
  installable.</changelog>
<changelog author="vuntz@opensuse.org" date="1337774400">- Bump version to 12.2, to prepare for next version of openSUSE.</changelog>
<changelog author="meissner@suse.com" date="1363867200">- updated to match pidgin version update bnc#804742</changelog>

</package>
<package pkgid="36872db61b571693cc6d8a924c2dc3753a868175a1d9dd00cc8c64b95aa14c64" name="yum-metadata-parser" arch="src">
    <version epoch="0" ver="1.1.2" rel="122.14.1"/>

<changelog author="cthiel@suse.de" date="1154779200">- initial package (version 1.0.2)</changelog>
<changelog author="cthiel@suse.de" date="1154779200">- added yum-metadata-parser-1.0-quiet.patch from Fedora</changelog>
<changelog author="cthiel@suse.de" date="1168257600">- update to version 1.0.3
  * sqlitecache.c: Never use the default glib log handler.  This way, when
  - d0 is passed, we won't output to the glib log handler (since nothing
    should be displayed at all).
  * sqlitecachec.py: support newer pysqlite as included in python 2.5
  * sqlitecache.c: Use structs and function pointers to reduce code
    duplication.
  * sqlitecache.c, sqlitecachec.py: Display repoid while populating the
    cache.</changelog>
<changelog author="cthiel@suse.de" date="1171627200">- remove Requires: yum</changelog>
<changelog author="cthiel@suse.de" date="1171627200">- Requires: python-sqlite</changelog>
<changelog author="cthiel@suse.de" date="1175860800">- update to version 1.0.4
  * db.c: Create a pkgKey index for provides, requires, conflicts, and
    obsoletes
  * db.c, db.h, package.h, sqlitecache.c, xml-parser.c: include Prereqs</changelog>
<changelog author="cthiel@suse.de" date="1178193600">- update to version 1.1.0
  * setup.py, yum-metadata-parser.spec: bump version to 1.1.0 b/c of the
    dbversion change
  * db.c, db.h, package.h, xml-parser.c: Bump database version to 10 build_*
    and time_* values are stored as ints, rather than text, and
    checksum_value has been dropped, as this is the same value as pkgId.
  * xml-parser.c: Reduce some code duplication in xml-parser</changelog>
<changelog author="cthiel@suse.de" date="1179748800">- update to version 1.1.1
  * Expose DBVERSION</changelog>
<changelog author="cthiel@suse.de" date="1188388800">- update to version 1.1.2
  * add some indexes to speed up a number of lookups in yum</changelog>
<changelog author="dmacvicar@suse.de" date="1360670400">- support &gt;2G rpms in the XML to sqlite conversion (upstream patch)
  (bnc#802576, rh#612409)</changelog>
<changelog author="bbrunner@suse.com" date="1363780800">- Fixed release-version</changelog>

</package>
<package pkgid="f8702b2ff92c6b77071a203a8946cc4fa372ed682b4b93f6a244347b7e79c1c2" name="bindfs" arch="i586">
    <version epoch="0" ver="1.12" rel="2.4.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1268568000">- initial package (1.8.4)</changelog>
<changelog author="jengelh@medozas.de" date="1336219200">- Update to new upstream version 1.10.2
  * No changelog was provided
- Remove redundant sections/tags from specfile
- Enable parallel build</changelog>
<changelog author="jengelh@inai.de" date="1341403200">- Update to new upstream version 1.10.6
  * a memory bug from 1.10.1, and --create-as-user and thread
  safety regressions were resolved
  * honor CFLAGS in ./configure call
  * fix a short-allocation that led to a crash in bindfs_readdir
  * implement a lookup cache to speed up repeated lookups
  (helpful for networked user databases, e.g. on LDAP)</changelog>
<changelog author="jengelh@inai.de" date="1350388800">- Update to new upstream release 1.11
  * Be single-threaded by default due to an inherent race condition;
  use -o multithreaded to get the old behavior back.
  * Respect setgid bit on directories when using --create-as-user</changelog>
<changelog author="jengelh@inai.de" date="1362139200">- Update to new upstream release 1.12
  * Replace "-o user" and "-o group" with "-o force-user" and
  "-o force-group", because the former are standard mount options
  that mount(8) consumes and does not pass on to the helper.
  (bnc#806956)</changelog>

</package>
<package pkgid="5ab6ed56d9bd420bceb817621496bf62df5da5a692c91cf980dceff3bb3a40de" name="cmis-client" arch="i586">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="2f0503794fee2bdae44cb0a9bb09201daa5f5e646afda25530bfa55a195057e1" name="gtkglext-devel" arch="i586">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="7d1a6634c68e38a7ffd9d99bd59d47bf57048f1222257a9b601fd7990662ce46" name="gtkglext-doc" arch="i586">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="38baeef8c38ed67da6e0028921d121ebd8c140772e5fa10fce1294ef19e11f37" name="ibm-data-db2" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="4db1f0b2f7f5805d4de2d3ae434888ebdf90bcf8aef09898dfea61aff163bd48" name="kiwi" arch="i586">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="9e725c597bf208e44e6c2dfba3e4863b251c3f7ed24fcc44a1aa4bbad24ccd8e" name="kiwi-desc-isoboot-requires" arch="i586">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="c46e2f6a61d1fad339a19338d0916e5ec3ae8eb7f2538d9c013afc5b30dafb3d" name="kiwi-desc-netboot-requires" arch="i586">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="60bee444e8a6d317ec98dfbc58134c5541029651bc558c46065850361b8dfa8a" name="kiwi-desc-oemboot-requires" arch="i586">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="6d6630e55c187e568374959160962775234373895a5d7f59a8aba89bba1a5217" name="kiwi-desc-vmxboot-requires" arch="i586">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="23e621fc1a1c4c604b95411291fadcef39df662eb9ccd8804088b02dedaffb8c" name="kiwi-tools" arch="i586">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="3de3065c78fefbb813fc454a3e59d5f8a72c80b4769d36fe7d3d3474f80fa720" name="libcmis-0_3-3" arch="i586">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="90f801dd56caa7ff2edbe8b092e1d25ee5b887ec1c9baa296242b1ae47322e50" name="libcmis-c-0_3-3" arch="i586">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="0b7f759bc8e595915712e691adafd0c02becb077182ebc7f7fea675d3581f423" name="libcmis-c-devel" arch="i586">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="a4a73d97bfa25cb3799995eeb40da455d549118d2cd7bf95a64ec69483b1db90" name="libcmis-devel" arch="i586">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="966acff7d097428f7a8dc153c90273012854760e644257f9827496e45b9a124d" name="libgtkglext-x11-1_0-0" arch="i586">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="96379572e9f4996b86f9319d3544764774c3360addd9cf12421f6eb863e8ad5e" name="libipa_hbac-devel" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="729353c99cb0f8cc56514dc770def1397f76c5a99e56871c2b4dc528040cb12b" name="libipa_hbac0" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="63088ef84472c616db323725beb83894f28a95b7bc8382a49485759b7eb8eb61" name="libmono-2_0-1" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="3c6d6279ba6c7ff76564adeb21baa80d833408c47dca107c80e2bd85d19f2abc" name="libmono-2_0-devel" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="93ae4259e258c6a158a1be2f884dec929cab4545158116cfbe0f43d370b936bf" name="libmonosgen-2_0-0" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="c990410edcdbe14cc04a3ae6cf66a2d9030ce2b82b919f4f7765ec412fc2b214" name="libmonosgen-2_0-devel" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="1eefd5e4038ac75ad0d170eded47385d2f3406cd817afdb1cc198728d2e81d14" name="libsss_idmap-devel" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="2a16661fcf0c6c1b7aa8b24cdaeea80c122b031d43aab54bbd43f69fe77dea16" name="libsss_idmap0" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="1ae1f363ac54b9f84c3b2ea207220b68fcc316ec3835c84b470f1d09d25a4de5" name="libsss_sudo" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="68bd0fbec45f49471993f537505d85ba2efb0ff6549a59f0d53de9dd7879c966" name="mono-complete" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="cc1af4d21644d0b0b2f3b0ece7a0936ba4b9a7c7f68cc604cfc544b564d0d58e" name="mono-core" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="2d3c6f555b8bdeb1f2f430089ff2cae09fae5ea8575999ff4ff19aee4a5b3438" name="mono-data" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="6a646924f506b1921be611b3b0db83cf8195d906bdd9abd6ae1fe4f7349f2f9e" name="mono-data-oracle" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="227429633bd2b826dee3f094a2c9bdf846bb1f6463625133d71ed34f72fef844" name="mono-data-postgresql" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="618902f620a54d76826d3c6989321bb76dbbc35c234cd55cbc7d6f365bfbda7d" name="mono-data-sqlite" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="b68f4c091b13a6bfd106a445191e6fa1347e66f7989890a8671d55629bdff9a8" name="mono-devel" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="719bbef88a9459b00d8fdf6d05798a8f280c28e16303322109bb97809acaf850" name="mono-entityframework" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="2a4199a433a01198ced8670c9f48ff763d18526d190c2192b23baa72ae879568" name="mono-extras" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="780ad35d51f472057a6dce8f0624fd1eba1b8051a270d4ffb97cb221b7a8f115" name="mono-locale-extras" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="d4e18fcfdd86cc9825215961ae8f5d1e150f6cf5019fd004af892788fd76b948" name="mono-mvc" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="eaf0aeec98f942e9db53499e1240238e46a062e0127e519b521791d4341ef343" name="mono-nunit" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="6341c6cc8f6ee140ec1e1d76f7bf8be7d6ca17af1ca9d75a47a9848ac08cfeb5" name="mono-reactive" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="7921ec0bbe45619c316586a5ea415217a2998e185fdfb314e3c5832a1d5bd02a" name="mono-wcf" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="191e0da542e806e0dbc951b78e0f02f8d7ee53bfd7c2ecaa339d3f4115bb8950" name="mono-web" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="61055422afbd883bc9c7410da94109ebabbe662df11c2ed491e5e5abb2d2f158" name="mono-winforms" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="70cb3d4cd8d16a57cc1951aa3dfa26c0b9fbe4ef2716fe824f6bccc54d6c31e0" name="mono-winfxcore" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="f1f258bdbd26b5907ac2a81f0ececbe9de3d067fe7800f2716700072a8213066" name="monodoc-core" arch="i586">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="2c7d296588d47de2cb30540859df36cb104f443c507483f5c29a487089f8c496" name="parkverbot" arch="i586">
    <version epoch="0" ver="1.1" rel="6.4.1"/>

<changelog author="jengelh@inai.de" date="1336478400">- Initial package for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1354536000">- Replace bad signature by a new one</changelog>
<changelog author="sbrabec@suse.cz" date="1354536000">- Verify GPG signature.</changelog>
<changelog author="jengelh@inai.de" date="1359633600">- Update to new upstream release 1.1 (bugfix release)
  * Fixed passing wrong type to ioctl, which made a 32-bit parkverbot
  exit and not run at all (bnc#801367)
  * Read all disks, rather than a single one, per interval
- systemd is not a runtime requirement</changelog>

</package>
<package pkgid="fdb2807316836e7fed578d8d60afa7a8d6396d935479429f6f57945b148aee51" name="python-ipa_hbac" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="05705ceb12ec582af103dbe3ffa5cd32a18b412a4813d9416cedaba135020828" name="python-sssd-config" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="95e2cc5b009f47ce8348c5f7fd6e433e35fc0d753fab022dc08e3077009cf2a6" name="sssd" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="1ba6550d68096748f0ab2a5f1419d4f9c810df301fc8cc473651d10cd00a4468" name="sssd-ipa-provider" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="7d2f098e2be4d1e0b6d55704560e1594dbf274452e1f60d1aaf93b0de461afc2" name="sssd-tools" arch="i586">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="55689724bae5013495b811b2f76a2f389ad6195539bc801480c419e1310b2ece" name="systemtap" arch="i586">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="031bb07e8d9f027c3cb04c7437a964f0f3213f6f82ce62d7fa4c367c2293b8db" name="systemtap-runtime" arch="i586">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="9e15b5eccfc0da3c465cdda119ffdc4780d2d39141af3d9fa8dcd5bd45fbdb15" name="systemtap-sdt-devel" arch="i586">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="bcfeed44cbbc8ec3b662ce3a533df89e9671bc807accc16c8b4cb81ec3996ae3" name="systemtap-server" arch="i586">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="1b97b4474cb8e88004ab313175046970190f9af368db90a8c7e3d11db24cf0d5" name="gnome-settings-daemon" arch="i586">
    <version epoch="0" ver="3.6.3" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1337083200">- Update to version 3.4.2:
  + General:
  - Fix memory leaks
  + Media-keys:
  - Fix applications launching through keyboard shortcuts not
    using the session's ssh agent, or keyrings
  + Mouse:
  - Fix arguments passed to the custom command
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Add gnome-settings-daemon-reduce-tap-delay.patch to reduce the
  delay between the last keystroke and the first touchpad tap when
  the option "Disable touchpad when typing" is enabled in mouse
  options in gnome-control-center (bgo#590783)
- Add gnome-settings-daemon-only-inhibit-touchpad-tapping.patch to
  inhibit only tapping and not affect pointer motion or scrolling
  using the touchpad when the option "Disable touchpad when
  typing" is enabled in mouse options in gnome-control-center
  (bgo#673055)
- Pass --libexecdir option to ./configure to change the
  installation dir of program executables to
  %{_libexecdir}/gnome-settings-daemon-3.0; fixes bnc#758592.</changelog>
<changelog author="dimstar@opensuse.org" date="1339243200">- Update to version 3.5.2:
  + Remove ability to D-Bus activate
  + Media keys:
  - Get proper gnome-keyring environment
  - Simplify the OSD code
  - Add keybindings to switch input sources
  + Mouse:
  - Fix applying settings to newly added touchpads
  - Reduce default touchpad deactivation to 1s
  + Housekeeping:
  - Split out 'ignore unix mount' code
  + Keyboard:
  - Always apply xmodmap
  - Lots of cleanups
  - Apply XKB layouts ourselfs and stop relying on libgnomekbd
  + Power:
  - Disconnect from upower signals when needed
  - Add org.gnome.settings-daemon.plugins.power.lid-close-
    suspend-with-extrnal-monitors
    key to allow forcing suspend on lid close
  + Print:
  - Fix setting of default media size
  - Don't create an unused proxy object
  - Speed up initialization
  + Updates:
  - Automatically download updates rather than installing them
  + Wacom:
  - Disable wacom support on s390
  - Disable wacom support on non-linux
  - Don't put touchscreens in relative mode
  - Make tablet configuration per-machine
  + Color:
  - Be quiet about unloadable profiles
  + Updated translations.
- Drop pkgconfig(libxklavier), pkgconfig(libgnomekbd) and
  pkgconfig(libgnomekbdui) BuildRequires.
- Add pkgconfig(xkbfile) BuildRequires: add upstream after
  libgnomekbd dependency got dropped.
- Drop gnome-settings-daemon-reduce-tap-delay.patch: fixed upstream
- Rebase gnome-settings-daemon-bnc462640-mute-action.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1340625600">- Update to version 3.5.3:
  + Housekeeping:
  - Support new XDG thumbnail directory locations
  + Keyboard A11y:
  - Don't crash when changing large print in fallback mode
  - Link to an existing help page
  + Keyboard:
  - Don't crash if LANG is empty
  + Media-keys:
  - Make &lt;Super&gt; keyboard shortcuts work again
  - Use systemd to shutdown or suspend if available
  + Mouse:
  - Only inhibits mouse clicks and scrolls with syndaemon
  + Power:
  - End the lid-close safety timer when the lid gets opened
  - Update fallback status icon on icon state change
  - Don't leak notifications
  - Avoid duplicate translations
  - Use systemd to shutdown or suspend if available
  - Don't enable backlight helper if GUdev is not available
  + Updates:
  - Adapt to new upstream property name
  - Add a notification for offline updates
  + Wacom:
  - Update display mapping on monitor changes
  - Flag unknown devices created from fallback
  - Add keep aspect ratio option
  - Use GnomeRROutput instead of GnomeRROutputInfo
  - Match built-in monitor
  + XRandr:
  - Explicitly set clone state variable when generating monitor
    configs.
- Drop gnome-settings-daemon-only-inhibit-touchpad-tapping.patch:
  fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 3.5.4:
  + Printers:
  - Don't block the session with unreachable printers
  + Wacom:
  - Fix crasher related to screen matching</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 3.5.5:
  + Add test applications for a number of plugins
  + Color:
  - Fix notification-related memory leaks
  + Housekeeping:
  - Fix notification-related memory leaks
  + Keyboard:
  - Add support for switching to IBus input methods
  + Updates:
  - Remove unused settings
  - Remove a number of unused notifications
  - Don't ever live-update packages in the session
  - Fix a number of memory leaks
  - Prevent crash if a device that requires a firmware is removed
    before the firmware search completes
  + Wacom:
  - Fix crasher related to screen tablets
  - Do not rotate "pad" devices
  - Apply display rotation to device that's mapped to it
  - Make shortcuts that require Shift work as expected
  - Re-apply calibration and aspect-ratio when the screen changes
    but don't apply it to touch devices.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Build:
  - Add optional man page.
  - List plugin schemas as children of the main schema.
  + Keyboard:
  - Require ibus 1.4.99 for ibus support.
  + Mouse:
  - If one device was ignored, we would ignore all the devices.
  + Smartcard:
  - Don't try to use smartcard drivers that didn't load.
  + Updates:
  - Remove unused code.
  - Avoid compilation warnings due to PackageKit API changes.
  + Wacom:
  - Avoid a warning at login.
- Add xsltproc BuildRequires: needed to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Keyboard:
  - Apply XKB options
  + Mouse:
  - Add support for natural scroll for touchpads
  + Power:
  - Fix D-Bus path of the screensaver
  + Wacom:
  - Implement the "switch monitor" combination
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Keyboard:
  - Don't handle IBus for fallback, it will use the same UI it
    always did.
  - Hook IBus support for legacy applications.
  + Mouse:
  - Fix natural-scroll not working until switched off and on
    again.
  + Power:
  - Do not attempt to change the brightness of an output that was
    disabled.
  - Fix idle blank and sleep timeout.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Add explicit pkgconfig(libpulse-mainloop-glib) BuildRequires:
  we forgot to add it when adding pkgconfig(libpulse).
- Add pkgconfig(xext) BuildRequires: new explicit dependency in
  3.5.5 for the power plugin that needs the XSync API.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Drop gnome-settings-daemon-bnc461755-randr-rotate-wacom.diff:
  this needed to be rebased for a long time, and there's a rocking
  support for wacom tablets upstream now. So this is most likely
  not needed anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Keyboard:
  - Don't block getting the IBus global engine.
  - Don't touch the XKB layout if no input sources were
    configured.
  - Fix gtk+ IM module getting set to IBus for XKB sources.
  + Media keys:
  - Make "toggle brightness" work.
  + Color:
  - Don't warn about non-existent DMI file.
  + Power:
  - Fix some instances where an external screen would turn off.
  + Wacom:
  - Require wacom 0.6 to fix bugs with some tablets.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Create sources from the X layouts if the configuration is empty
  + Always do that in GDM, so system-wide layouts work
  + Add modifiers-only shortcuts to switch input sources.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349870400">- Update to version 3.6.1:
  + Color:
  - Fix possible crashers on exit
  + Keyboard:
  - Allow grabbing the Menu key
  - Apply XKB variants and options for each IBus engine
  - Don't setup legacy toolkits if IBus is missing
  - Add default setup for some particular languages
  - Convert old libgnomekbd and IBus configurations
  - Add support for more modifiers only combinations
  - Fix input switching eating the modifiers keys in some cases
  + Mouse:
  - Fix "Locate Pointer" eating the Ctrl key
  - Fix "Locate Pointer" animation showing when the Ctrl key has
    been used
  + Updates:
  - Never show the user a message about cancelled transactions
  + Wacom:
  - Fix LEDs switching for some tablet models
  + Housekeeping:
  - Fix possible crashers on exit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352376000">- Update to version 3.6.2:
  + Make test applications work when libnotify was used.
  + Keyboard:
  - Add default ibus engine for Indic locales.
  - Prevent 100% CPU usage related to remembering Num-Lock state.
  - Don't print warning messages when resuming from suspend.
  + Power:
  - Fix screen dimming and power saving even when inhibited.
  - Don't suspend, dim or blank when running in virtual machines.
  - Fix warning output in the Brightness &amp; Lock panel.
  - Fix possible crash when the backlight fails to be turned off
    for example.
  + Sound:
  - Fix alert sound changes requiring a log out/login to apply.
  + Updates:
  - Don't require the user to click OK to clear the message for
    successful offline updates.
  + Wacom:
  - Fix touchstrips and touchrings without a modeswitch.
  + XSettings:
  - Make startup smoother by batching settings updates together.
- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Keyboard: Add keyboard shortcuts including CapsLock to switch
    input sources..
  + Mouse: Fix horizontal natural scrolling.
  + Power: Fix a warning on startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1358078400">- Add gnome-settings-daemon-notify-idle-resumed.patch, notify user
  about auto suspend when returning from sleep (bnc#708182).</changelog>
<changelog author="dimstar@opensuse.org" date="1358683200">- Add gnome-settings-daemon-double-suspend.patch: Fix double
  suspend: if GNOME is configured to suspend on lid close, the
  system goes directly back in sleep upon a wakeup call. Only the
  2nd wake up is successful and persistent. This issue comes from
  systemd and gnome both executing suspend.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add gnome-settings-daemon-restore-datetime-plugin.patch: needed
  for gnome-control-center to properly toggle NTP given that
  timedated is broken on openSUSE; needed until the corresponding
  gnome-control-center patch is removed (bnc#796055).</changelog>

</package>
<package pkgid="a497d77a3c6db87bd6b0ea27aba7ef27a32aa5c5f223de676bfc1ac43070b499" name="timezone" arch="i586">
    <version epoch="0" ver="2013a" rel="2.5.1"/>

<changelog author="dmueller@suse.de" date="1315915200">- update to 2011j:
  * Fix past timezones for Kenya, Uganda, and Tanzani
  * Samoa uses DST in 2011-2012 starting on September 24th 3am</changelog>
<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>

</package>
<package pkgid="62ec37793aeac82d2103e975a920f2445ea46409ba7d7d23633bc5dcb2ba4ccf" name="timezone" arch="i586">
    <version epoch="0" ver="2013b" rel="2.9.1"/>

<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- tzcode and tzdata 2013b
  * Haiti uses US daylight-saving rules this year, and presumably future years.
    This changes time stamps starting today.
  * Paraguay will end DST on March 24 this year.
  * Morocco does not observe DST during Ramadan.</changelog>

</package>
<package pkgid="e325400a48e055496bc58739921c3d65e97b802dabe950f34a49a690fcd2902f" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="4a4bbe388d2273c9a602c908f68f516573e46fbd823949fdd403d8d7dea222e6" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="43a127686fb94d96941a6ac97fabcf589ba129dc0aefc5b93f57c55f5eaccbfa" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="332aab36f984ede54ff1b9d9113cf55c75a5c8aaa0dab6906655ccb57f9b4afc" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="9f5cc400fab6fa26fa3f17a9546bb002f6dd66f990848d613694a558ca84386b" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="d7e5227ebe4abc73be633385e920336936d0f294c2c7ead8167cdc736ad9fa8b" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="0c52454a332ddf86d883a8525c61e46b7004aba9bb559eafe483fe9a1ee5a7a4" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="95d66868cb46a1eb269b86542f6ab034a504c084c2660c02dd907514ed3ce396" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="22941e8c800b07fd548a9cb14e019a7d98b0cfb80c2db592b75c0f41c124cacc" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="a486ff9bdd76a7211bf05662410ed973cfc114702f44f40f801e52be81cc0122" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="c1fe9ec4d61ee094b61ff0ed711dc7454cf37bbd093ac162b7b22cecc9126c2f" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="aeb41a1a921636b5a44514b329254dd09aaed2efb17aeaf7de1d0ea218694e1d" name="enigmail" arch="i586">
    <version epoch="0" ver="1.5.1+17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="e6933582e897b91c8c09c8c43c19c482b241406652658d8b94ddefcbf9b49e4a" name="mozilla-js" arch="i586">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="b02867f9837d73ede54e594a6f56ab3c1dec391847f33bcecdcb33b63a04d2bd" name="seamonkey" arch="i586">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="5afefe66548fcc1dadebf9581cd74936f03f848faecbf9c5bfc0cf22a49ea1da" name="seamonkey-dom-inspector" arch="i586">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="81cf67038c4b52fc788a0455d0e0aa231130da9154bb5d9f4c85f558cac1cb61" name="seamonkey-irc" arch="i586">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="c93b7b2d8a6c404f03690406e889f4c4c4a19176e1ea462da3bba932a676f129" name="seamonkey-translations-common" arch="i586">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="15b33883586588524bc379cd26607974dc3f1ac6d5ff18730b0e35fa043c10ff" name="seamonkey-translations-other" arch="i586">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="ab1b81854133f79450c35832396e3bc353cd70841e6ffadb5baf68dcd7feaa49" name="seamonkey-venkman" arch="i586">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="3abae84dbe734f84e2a101860085bcf99d4a672d466ae97b46cc17e9fea25435" name="xulrunner" arch="i586">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="c3107b74ce475ff778e38529f27e0b81ab8c9581ae01019240bc6834773238ac" name="xulrunner-buildsymbols" arch="i586">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="0d2ded4e36240de808f5fd4ab1220f71f74defd9887f8368fcf116e7bd1179e9" name="xulrunner-devel" arch="i586">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="d1b33620baabe5962bdda25262d61b696f3bc3c7d210328aa8a706f9a4d2083f" name="ewftools" arch="i586">
    <version epoch="0" ver="0.0.0+20120813" rel="2.4.1"/>

<changelog author="toganm@opensuse.org" date="1284465600">- Initial opensuse build service checkin</changelog>
<changelog author="toganm@opensuse.org" date="1315137600">- Reworked spec based on fedora package
- TODO
  +enable disktype for requires</changelog>
<changelog author="cfarrell@suse.com" date="1328529600">- license update: LGPL-3.0+
  No indication that LGPL-3.0 is the license (i.e. only). Looks like
  LGPL-3.0+</changelog>
<changelog author="saschpe@suse.de" date="1328702400">- Spec file cleanup:
  * Provide sane versioning, this will break updates in the 'security'
    project now, but this is better than breaking Factory updates later.
  * Don't "rm -rf %buildroot" in the %install section
  * Use upstream tarballs
  * Cleanup BuildRequires</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346846400">- upgrade to libewf-20120813
  * Bug fixes and multiple enhancements
  * soname update from 1 to 2
  * see ChangeLog
- remove pyver patch, now upstream
- add remove_date_time_macros.patch to keep builds consistent
- add zlib as requires as per sample specfile in tarball
- Add SLES build support</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346932800">- change license to GPL-3.0+ until upstream resolves LGPL-3.0+ status (BNC# 778993)
- run spec-cleaner
- make soname a define
- remove requires libewf from ewftools sub-package</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1362830400">- fix for ewfmount (bnc#808550)
  * fails with the error msg:  No sub system to mount EWF format.
  * added BuildRequires: fuse-devel
  * added Recommends: fuse   (ewfmount is not core functionality of this package)</changelog>

</package>
<package pkgid="c2f51e129c1d425496b1707805b49ff45a9a3795a81edca617d2901f3d994248" name="libewf-devel" arch="i586">
    <version epoch="0" ver="0.0.0+20120813" rel="2.4.1"/>

<changelog author="toganm@opensuse.org" date="1284465600">- Initial opensuse build service checkin</changelog>
<changelog author="toganm@opensuse.org" date="1315137600">- Reworked spec based on fedora package
- TODO
  +enable disktype for requires</changelog>
<changelog author="cfarrell@suse.com" date="1328529600">- license update: LGPL-3.0+
  No indication that LGPL-3.0 is the license (i.e. only). Looks like
  LGPL-3.0+</changelog>
<changelog author="saschpe@suse.de" date="1328702400">- Spec file cleanup:
  * Provide sane versioning, this will break updates in the 'security'
    project now, but this is better than breaking Factory updates later.
  * Don't "rm -rf %buildroot" in the %install section
  * Use upstream tarballs
  * Cleanup BuildRequires</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346846400">- upgrade to libewf-20120813
  * Bug fixes and multiple enhancements
  * soname update from 1 to 2
  * see ChangeLog
- remove pyver patch, now upstream
- add remove_date_time_macros.patch to keep builds consistent
- add zlib as requires as per sample specfile in tarball
- Add SLES build support</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346932800">- change license to GPL-3.0+ until upstream resolves LGPL-3.0+ status (BNC# 778993)
- run spec-cleaner
- make soname a define
- remove requires libewf from ewftools sub-package</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1362830400">- fix for ewfmount (bnc#808550)
  * fails with the error msg:  No sub system to mount EWF format.
  * added BuildRequires: fuse-devel
  * added Recommends: fuse   (ewfmount is not core functionality of this package)</changelog>

</package>
<package pkgid="a431fe8209fb23c8ce2e8aab68dd4632564152d7cf4dddfe8511686b9ca2e7e2" name="libewf2" arch="i586">
    <version epoch="0" ver="0.0.0+20120813" rel="2.4.1"/>

<changelog author="toganm@opensuse.org" date="1284465600">- Initial opensuse build service checkin</changelog>
<changelog author="toganm@opensuse.org" date="1315137600">- Reworked spec based on fedora package
- TODO
  +enable disktype for requires</changelog>
<changelog author="cfarrell@suse.com" date="1328529600">- license update: LGPL-3.0+
  No indication that LGPL-3.0 is the license (i.e. only). Looks like
  LGPL-3.0+</changelog>
<changelog author="saschpe@suse.de" date="1328702400">- Spec file cleanup:
  * Provide sane versioning, this will break updates in the 'security'
    project now, but this is better than breaking Factory updates later.
  * Don't "rm -rf %buildroot" in the %install section
  * Use upstream tarballs
  * Cleanup BuildRequires</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346846400">- upgrade to libewf-20120813
  * Bug fixes and multiple enhancements
  * soname update from 1 to 2
  * see ChangeLog
- remove pyver patch, now upstream
- add remove_date_time_macros.patch to keep builds consistent
- add zlib as requires as per sample specfile in tarball
- Add SLES build support</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346932800">- change license to GPL-3.0+ until upstream resolves LGPL-3.0+ status (BNC# 778993)
- run spec-cleaner
- make soname a define
- remove requires libewf from ewftools sub-package</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1362830400">- fix for ewfmount (bnc#808550)
  * fails with the error msg:  No sub system to mount EWF format.
  * added BuildRequires: fuse-devel
  * added Recommends: fuse   (ewfmount is not core functionality of this package)</changelog>

</package>
<package pkgid="c7cac84b43b75fb3a0c74e4a0a953a1df43fe6830cfce7ad781160fdd2d6e74f" name="gnome-control-center" arch="i586">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="60b8effe8322cb8e37dc43e0dbe147d140b9d9fa9460ec479888c5841851004e" name="gnome-control-center-devel" arch="i586">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="0f041db9034eae606e95534fecc004d64dbb41483650986a7973505bc0d0b7e0" name="gnome-control-center-user-faces" arch="i586">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="73f19e6c01cbec85112a69c93ddbb696f31ca942f55a434bf3b1422e7a1f0ef1" name="gnome-settings-daemon-devel" arch="i586">
    <version epoch="0" ver="3.6.3" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1337083200">- Update to version 3.4.2:
  + General:
  - Fix memory leaks
  + Media-keys:
  - Fix applications launching through keyboard shortcuts not
    using the session's ssh agent, or keyrings
  + Mouse:
  - Fix arguments passed to the custom command
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Add gnome-settings-daemon-reduce-tap-delay.patch to reduce the
  delay between the last keystroke and the first touchpad tap when
  the option "Disable touchpad when typing" is enabled in mouse
  options in gnome-control-center (bgo#590783)
- Add gnome-settings-daemon-only-inhibit-touchpad-tapping.patch to
  inhibit only tapping and not affect pointer motion or scrolling
  using the touchpad when the option "Disable touchpad when
  typing" is enabled in mouse options in gnome-control-center
  (bgo#673055)
- Pass --libexecdir option to ./configure to change the
  installation dir of program executables to
  %{_libexecdir}/gnome-settings-daemon-3.0; fixes bnc#758592.</changelog>
<changelog author="dimstar@opensuse.org" date="1339243200">- Update to version 3.5.2:
  + Remove ability to D-Bus activate
  + Media keys:
  - Get proper gnome-keyring environment
  - Simplify the OSD code
  - Add keybindings to switch input sources
  + Mouse:
  - Fix applying settings to newly added touchpads
  - Reduce default touchpad deactivation to 1s
  + Housekeeping:
  - Split out 'ignore unix mount' code
  + Keyboard:
  - Always apply xmodmap
  - Lots of cleanups
  - Apply XKB layouts ourselfs and stop relying on libgnomekbd
  + Power:
  - Disconnect from upower signals when needed
  - Add org.gnome.settings-daemon.plugins.power.lid-close-
    suspend-with-extrnal-monitors
    key to allow forcing suspend on lid close
  + Print:
  - Fix setting of default media size
  - Don't create an unused proxy object
  - Speed up initialization
  + Updates:
  - Automatically download updates rather than installing them
  + Wacom:
  - Disable wacom support on s390
  - Disable wacom support on non-linux
  - Don't put touchscreens in relative mode
  - Make tablet configuration per-machine
  + Color:
  - Be quiet about unloadable profiles
  + Updated translations.
- Drop pkgconfig(libxklavier), pkgconfig(libgnomekbd) and
  pkgconfig(libgnomekbdui) BuildRequires.
- Add pkgconfig(xkbfile) BuildRequires: add upstream after
  libgnomekbd dependency got dropped.
- Drop gnome-settings-daemon-reduce-tap-delay.patch: fixed upstream
- Rebase gnome-settings-daemon-bnc462640-mute-action.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1340625600">- Update to version 3.5.3:
  + Housekeeping:
  - Support new XDG thumbnail directory locations
  + Keyboard A11y:
  - Don't crash when changing large print in fallback mode
  - Link to an existing help page
  + Keyboard:
  - Don't crash if LANG is empty
  + Media-keys:
  - Make &lt;Super&gt; keyboard shortcuts work again
  - Use systemd to shutdown or suspend if available
  + Mouse:
  - Only inhibits mouse clicks and scrolls with syndaemon
  + Power:
  - End the lid-close safety timer when the lid gets opened
  - Update fallback status icon on icon state change
  - Don't leak notifications
  - Avoid duplicate translations
  - Use systemd to shutdown or suspend if available
  - Don't enable backlight helper if GUdev is not available
  + Updates:
  - Adapt to new upstream property name
  - Add a notification for offline updates
  + Wacom:
  - Update display mapping on monitor changes
  - Flag unknown devices created from fallback
  - Add keep aspect ratio option
  - Use GnomeRROutput instead of GnomeRROutputInfo
  - Match built-in monitor
  + XRandr:
  - Explicitly set clone state variable when generating monitor
    configs.
- Drop gnome-settings-daemon-only-inhibit-touchpad-tapping.patch:
  fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 3.5.4:
  + Printers:
  - Don't block the session with unreachable printers
  + Wacom:
  - Fix crasher related to screen matching</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 3.5.5:
  + Add test applications for a number of plugins
  + Color:
  - Fix notification-related memory leaks
  + Housekeeping:
  - Fix notification-related memory leaks
  + Keyboard:
  - Add support for switching to IBus input methods
  + Updates:
  - Remove unused settings
  - Remove a number of unused notifications
  - Don't ever live-update packages in the session
  - Fix a number of memory leaks
  - Prevent crash if a device that requires a firmware is removed
    before the firmware search completes
  + Wacom:
  - Fix crasher related to screen tablets
  - Do not rotate "pad" devices
  - Apply display rotation to device that's mapped to it
  - Make shortcuts that require Shift work as expected
  - Re-apply calibration and aspect-ratio when the screen changes
    but don't apply it to touch devices.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Build:
  - Add optional man page.
  - List plugin schemas as children of the main schema.
  + Keyboard:
  - Require ibus 1.4.99 for ibus support.
  + Mouse:
  - If one device was ignored, we would ignore all the devices.
  + Smartcard:
  - Don't try to use smartcard drivers that didn't load.
  + Updates:
  - Remove unused code.
  - Avoid compilation warnings due to PackageKit API changes.
  + Wacom:
  - Avoid a warning at login.
- Add xsltproc BuildRequires: needed to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Keyboard:
  - Apply XKB options
  + Mouse:
  - Add support for natural scroll for touchpads
  + Power:
  - Fix D-Bus path of the screensaver
  + Wacom:
  - Implement the "switch monitor" combination
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Keyboard:
  - Don't handle IBus for fallback, it will use the same UI it
    always did.
  - Hook IBus support for legacy applications.
  + Mouse:
  - Fix natural-scroll not working until switched off and on
    again.
  + Power:
  - Do not attempt to change the brightness of an output that was
    disabled.
  - Fix idle blank and sleep timeout.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Add explicit pkgconfig(libpulse-mainloop-glib) BuildRequires:
  we forgot to add it when adding pkgconfig(libpulse).
- Add pkgconfig(xext) BuildRequires: new explicit dependency in
  3.5.5 for the power plugin that needs the XSync API.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Drop gnome-settings-daemon-bnc461755-randr-rotate-wacom.diff:
  this needed to be rebased for a long time, and there's a rocking
  support for wacom tablets upstream now. So this is most likely
  not needed anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Keyboard:
  - Don't block getting the IBus global engine.
  - Don't touch the XKB layout if no input sources were
    configured.
  - Fix gtk+ IM module getting set to IBus for XKB sources.
  + Media keys:
  - Make "toggle brightness" work.
  + Color:
  - Don't warn about non-existent DMI file.
  + Power:
  - Fix some instances where an external screen would turn off.
  + Wacom:
  - Require wacom 0.6 to fix bugs with some tablets.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Create sources from the X layouts if the configuration is empty
  + Always do that in GDM, so system-wide layouts work
  + Add modifiers-only shortcuts to switch input sources.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349870400">- Update to version 3.6.1:
  + Color:
  - Fix possible crashers on exit
  + Keyboard:
  - Allow grabbing the Menu key
  - Apply XKB variants and options for each IBus engine
  - Don't setup legacy toolkits if IBus is missing
  - Add default setup for some particular languages
  - Convert old libgnomekbd and IBus configurations
  - Add support for more modifiers only combinations
  - Fix input switching eating the modifiers keys in some cases
  + Mouse:
  - Fix "Locate Pointer" eating the Ctrl key
  - Fix "Locate Pointer" animation showing when the Ctrl key has
    been used
  + Updates:
  - Never show the user a message about cancelled transactions
  + Wacom:
  - Fix LEDs switching for some tablet models
  + Housekeeping:
  - Fix possible crashers on exit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352376000">- Update to version 3.6.2:
  + Make test applications work when libnotify was used.
  + Keyboard:
  - Add default ibus engine for Indic locales.
  - Prevent 100% CPU usage related to remembering Num-Lock state.
  - Don't print warning messages when resuming from suspend.
  + Power:
  - Fix screen dimming and power saving even when inhibited.
  - Don't suspend, dim or blank when running in virtual machines.
  - Fix warning output in the Brightness &amp; Lock panel.
  - Fix possible crash when the backlight fails to be turned off
    for example.
  + Sound:
  - Fix alert sound changes requiring a log out/login to apply.
  + Updates:
  - Don't require the user to click OK to clear the message for
    successful offline updates.
  + Wacom:
  - Fix touchstrips and touchrings without a modeswitch.
  + XSettings:
  - Make startup smoother by batching settings updates together.
- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Keyboard: Add keyboard shortcuts including CapsLock to switch
    input sources..
  + Mouse: Fix horizontal natural scrolling.
  + Power: Fix a warning on startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1358078400">- Add gnome-settings-daemon-notify-idle-resumed.patch, notify user
  about auto suspend when returning from sleep (bnc#708182).</changelog>
<changelog author="dimstar@opensuse.org" date="1358683200">- Add gnome-settings-daemon-double-suspend.patch: Fix double
  suspend: if GNOME is configured to suspend on lid close, the
  system goes directly back in sleep upon a wakeup call. Only the
  2nd wake up is successful and persistent. This issue comes from
  systemd and gnome both executing suspend.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add gnome-settings-daemon-restore-datetime-plugin.patch: needed
  for gnome-control-center to properly toggle NTP given that
  timedated is broken on openSUSE; needed until the corresponding
  gnome-control-center patch is removed (bnc#796055).</changelog>

</package>
<package pkgid="e61d960e87151f517710515fc7282bfc7f3a0990d09ff3801e7815214e2d3013" name="nagios-nsca" arch="i586">
    <version epoch="0" ver="2.9.1" rel="5.4.1"/>

<changelog author="tsieden@suse.de" date="1165492800">- package split: nagios-nsca for the server and
  nagios-nsca-client for the remote host
- removed unneeded BuildRequires (nagios)</changelog>
<changelog author="tsieden@suse.de" date="1170072000">- update to version 2.7
  * Fixed crash from malformed command line
    (therefore removed removed nagios-nsca.send_nsca.formatstring.patch)
  * Updated to config.sub and config.guess to latest from GNU Savannah
  * changed default user and group to nagios nagios (#236135)</changelog>
<changelog author="tsieden@suse.de" date="1171022400">- update to version 2.7.1
  * Fixed bug that prevented single mode daemon from working properly
  * Added sample scripts for testing functionality to nsca_tests/
    (Ton Voon/Altinity)</changelog>
<changelog author="tsieden@suse.de" date="1187006400">- update to version 2.7.2
  * fixed bug with NSCA daemon eating CPU if child process
  couldn't accept a connection in multi-process mode (Chris Wilson)</changelog>
<changelog author="tsieden@suse.de" date="1188561600">- cleanup spec file (removed unneeded %dir entry)</changelog>
<changelog author="schneemann@b1-systems.de" date="1320926400">- update to version 2.9
  * Add config directive to submit directly to checkresults directory (Mike Lindsey)
  * Support multi-line check output with 4000 character limit (Mike Lindsey)
- fixes in skipped version 2.8
  * Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki)
  * Fixed bug where daemon would segfault if mcrypt library was not initialized before timeout (Holger Weiss)
  * Fixed bug with switching from dump file to command file when running under single mode (Ton Voon)
  * Fix for small memory leak with running as a single process daemon (Daniel)</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="lars@linux-schulserver.de" date="1328270400">- update to 2.9.1:
  + Applied patch to allow packets arriving with a future time stamp
    (Daniel Wittenberg)
  + Updated server (nsca) to allow packets with older, smaller
    packet size (Eric Stanley)
- use macros from nagios-rpm-macros package
- added rpmlintrc</changelog>
<changelog author="lars@linux-schulserver.de" date="1349956800">- recommend 'monitoring_daemon' to allow nsca to run with
  compatible monitoring solutions</changelog>
<changelog author="lars@linux-schulserver.de" date="1363262400">- added man pages for nsca and send_nsca (fixes bnc#804614)</changelog>

</package>
<package pkgid="95f76b9d0b52fa0fafbb89e3885d1203716639f007f458b06a8fb0ff6dd56617" name="nagios-nsca-client" arch="i586">
    <version epoch="0" ver="2.9.1" rel="5.4.1"/>

<changelog author="tsieden@suse.de" date="1165492800">- package split: nagios-nsca for the server and
  nagios-nsca-client for the remote host
- removed unneeded BuildRequires (nagios)</changelog>
<changelog author="tsieden@suse.de" date="1170072000">- update to version 2.7
  * Fixed crash from malformed command line
    (therefore removed removed nagios-nsca.send_nsca.formatstring.patch)
  * Updated to config.sub and config.guess to latest from GNU Savannah
  * changed default user and group to nagios nagios (#236135)</changelog>
<changelog author="tsieden@suse.de" date="1171022400">- update to version 2.7.1
  * Fixed bug that prevented single mode daemon from working properly
  * Added sample scripts for testing functionality to nsca_tests/
    (Ton Voon/Altinity)</changelog>
<changelog author="tsieden@suse.de" date="1187006400">- update to version 2.7.2
  * fixed bug with NSCA daemon eating CPU if child process
  couldn't accept a connection in multi-process mode (Chris Wilson)</changelog>
<changelog author="tsieden@suse.de" date="1188561600">- cleanup spec file (removed unneeded %dir entry)</changelog>
<changelog author="schneemann@b1-systems.de" date="1320926400">- update to version 2.9
  * Add config directive to submit directly to checkresults directory (Mike Lindsey)
  * Support multi-line check output with 4000 character limit (Mike Lindsey)
- fixes in skipped version 2.8
  * Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki)
  * Fixed bug where daemon would segfault if mcrypt library was not initialized before timeout (Holger Weiss)
  * Fixed bug with switching from dump file to command file when running under single mode (Ton Voon)
  * Fix for small memory leak with running as a single process daemon (Daniel)</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="lars@linux-schulserver.de" date="1328270400">- update to 2.9.1:
  + Applied patch to allow packets arriving with a future time stamp
    (Daniel Wittenberg)
  + Updated server (nsca) to allow packets with older, smaller
    packet size (Eric Stanley)
- use macros from nagios-rpm-macros package
- added rpmlintrc</changelog>
<changelog author="lars@linux-schulserver.de" date="1349956800">- recommend 'monitoring_daemon' to allow nsca to run with
  compatible monitoring solutions</changelog>
<changelog author="lars@linux-schulserver.de" date="1363262400">- added man pages for nsca and send_nsca (fixes bnc#804614)</changelog>

</package>
<package pkgid="9719839dd146be0626727d5f2aec60688d1d497409c81d40491625c85ed0e5e9" name="kdebase4-openSUSE" arch="i586">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="62a39bdd91c70a5bb861649c4d13a9939eec79684debaffacdd4618830a4c6a8" name="kdebase4-runtime-branding-openSUSE" arch="i586">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="9f24e830216145519e877763016c9a3d88dc50fb51c3e693234394dc0240ccf3" name="kdebase4-workspace-branding-openSUSE" arch="i586">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="f5b19ecf960f16fe519d44b3eec846b8e1b2a79bc387e8bab81e36ed5bb55f80" name="libpulse-devel" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="074061e6b7b6f8a6a5a3fea2c055acd40bdbf44dd9a6248987c22dcc37e4d185" name="libpulse-mainloop-glib0" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="7252f0938b369b4e50fe209a241dc8b7e682792cddfe6aca287f1a39f1c84651" name="libpulse0" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="06c7a9de2bc68a84c333bc181876a1ffc777b5f803d126faac1a80f5b1b386a0" name="open-iscsi" arch="i586">
    <version epoch="0" ver="2.0.870" rel="47.4.1"/>

<changelog author="hare@suse.de" date="1228219200">- iscsiadm -m fw crashes on ppc (bnc#449116)</changelog>
<changelog author="hare@suse.de" date="1228478400">- Fixup 'onboot' for loginall (bnc#449108)
- Remove unused 'dump_char' definition in log.c
- Load ibft module before reading /sys/firmware (bnc#450897)</changelog>
<changelog author="hare@suse.de" date="1228737600">- Remove trailing tilde from /etc/iscsi/ifaces.example (bnc#450870)</changelog>
<changelog author="ro@suse.de" date="1232971200">- change fillup call from "-Y" to "-y" the boot script has
  been present in this package for long enough (SLES10-GA)</changelog>
<changelog author="crrodriguez@suse.de" date="1245585600">- build with fno-strict-aliasing
- do not use static libc, this does not work in reality, use
  of getaddrinfo(3) requires shared libraries at runtime</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="mmarek@suse.cz" date="1268395200">- Do not hardcode the iscsi_ibft module in the iscsi mkinitrd
  script, the ibft script handles this correctly (bnc#528657).</changelog>
<changelog author="aj@suse.de" date="1307361600">- Fix build with newer glibc.</changelog>
<changelog author="aj@suse.de" date="1319716800">- Rename init scripts (bnc#661401).</changelog>
<changelog author="lduncan@suse.com" date="1363262400">- Add open-iscsi-support-non-root-boot-volume.patch: handle non-
  root boot-time iscsi volumes (bnc#630434)
- Add open-iscsi-fix-sysfs-get-value-null.patch: accept "(null)"
  password as meaning no password, when using sysfs (bnc#766300)</changelog>

</package>
<package pkgid="dfaeea3a195732bfaff14f1e6f3c3f8f295342f88679b6077178e13c4287bbc4" name="pulseaudio" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="ebbadf45058353ff20d8cb57aa3324d0e3108abb9c0e1127c5039565bf7d444b" name="pulseaudio-esound-compat" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="0020ff5ad81073fbe6b24a41cf7c217358326270a6403320a21057719b12c128" name="pulseaudio-gdm-hooks" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="981619bde139f9b54f4e129cb980992146539af24f67158dd8dab3676270ddc9" name="pulseaudio-module-bluetooth" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="0535f97ae0277e136398fcab326552175971ec17fbb2f64f270507265c448d65" name="pulseaudio-module-gconf" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="b07140500a730165473a2ccfbd6fcc3ac41af754b9dca9b3cd6e23a5f7e2babd" name="pulseaudio-module-jack" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="e5111e6c884563fbe440e1429b8ae31397f97c294714b52cd9635bd1f4cf61c9" name="pulseaudio-module-lirc" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="ba1bd5daf563ca0ea3a450d005b0da51abd65266d4d56e928393a5db8d544f17" name="pulseaudio-module-x11" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="63cb7607275f6d33b0428aece3987f838ce167eb34a62a2a42e1f55091b20d9a" name="pulseaudio-module-zeroconf" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="449222dd276a0f7ae9ef2fd6a4abe6b3ecbf23fc01eb88204160e8833794b093" name="pulseaudio-utils" arch="i586">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="8d9304d9edc5d3ba7d3d6f107e41f3f3e3e517d976fd8550936845f6a94f04aa" name="firebird" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="40cb54c3d7708bc453d87d3c18a58ef8756e5ddecde76b594181dacbb3216f8b" name="firebird-classic" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="c020e596ed6e3de92b8570779d203f47951cf61e2cd74ce61fd88b8cb112d403" name="firebird-devel" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="df1446175a063d7e0aed027ac05e3f1c4b5eaebd225609e43d2e69b1a1cc8efc" name="firebird-superserver" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="1eadbced19b5bf9c5bc3aeaf4b175ab1a6268f0aca1851b64c380f48587a3199" name="krb5" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="657e90364d1c93dbdf085f9970f6d4e64cb60ad133ba9aa4ff810ad93a5031e8" name="krb5-client" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="69251b98fa4126e26bde474b3b912d2cbb180d7c1084f4cd46937e06b49d6826" name="krb5-devel" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="2d290391d62a730c6432d8db98286696d5ee37930661f11b39c7200db937d56d" name="krb5-mini" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="c8cabf4c8f7ee94454bae654d988301bd5609e721a08b47577e42b3a06093ad6" name="krb5-mini-devel" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="e991badcc30ed6891ba313920f78cb471bbb8c0df3d5750459996d9a3659ffcc" name="krb5-plugin-kdb-ldap" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="5074f2dfb0acdd6f8487da2689dde7b3ce9dcd2afaba00044551a496bb9d478f" name="krb5-plugin-preauth-pkinit" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="b42dba7bee09fc3dc5c3e1d96f518fac80402249ba14d2e5edcd7eb4f8f8ad55" name="krb5-server" arch="i586">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="0b0d1209202e123e816d705bb68cc889b78b7854500773f789f48df4e2c31b98" name="libfbclient2" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="eefe752cb44bc8599a2d70a8a665722c11d84b2f2f7ce5078b31a5216e76c047" name="libfbclient2-devel" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="880c1e36c6730232741f801587fce06b7779574b51f2adff935764dd5b8f6201" name="libfbembed-devel" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="86884988e35faff4d9a6e782f16ab1c243c5c362126e369de37cbfe82db50661" name="libfbembed2_5" arch="i586">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="bcdfbf83809ef4134b71239cceed01ffed2ef2129e859891bfe0443cb12d65dc" name="perl" arch="i586">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="0b0bf0877a4d78061da3619eab44eb58d8c9aac16ea07f02c1e9289673f1e502" name="perl-base" arch="i586">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="bde7f4f6347151ab045b20bf9461273151ce8128b065e0b078d2bfa771df7ea4" name="sudo" arch="i586">
    <version epoch="0" ver="1.8.6p3" rel="3.5.1"/>

<changelog author="puzel@novell.com" date="1275480000">- add sudo-CVE-2010-1646.patch (bnc#594738)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1276603200">- update to 1.7.2p7:
  * portability fixes
- changes from 1.7.2p6:
  * Handle duplicate variables in the environment
  * visudo: fix a crash when checking a sudoers file that has aliases
    that reference themselves
  * aliases: fix use after free in error message when a duplicate
    alias exists
  * visudo: prevent NULL dereference in printf()
- removed sudo-CVE-2010-1163.patch (merged upstream)
- removed sudo-CVE-2010-1646.patch (merged upstream)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1294920000">- add sudo-CVE-2011-0010.patch (bnc#663881)</changelog>
<changelog author="cprause@novell.com" date="1296129600">- added openldap schema file (bnc#667558)</changelog>
<changelog author="puzel@novell.com" date="1300363200">- update to sudo-1.8.0
  * Sudo has been refactored to use a modular framework that can
    support third-party policy and I/O logging plugins.
  * Defaults settings that are tied to a user, host or command may
    now include the negation operator. For example:
    Defaults:!millert lecture
    will match any user but millert.
  * The default PATH environment variable, used when no PATH
    variable exists, now includes /usr/sbin and /sbin.
  * Support for logging I/O for the command being run.
  * Sudo will now use the Linux audit system.
  + See /usr/share/doc/packages/sudo/NEWS for full list
- new configure script flags: enable-warnings, with-linux-audit,
  docdir, with-sendmail
- BuildRequires += audit-devel
- BuildRequires -= postfix
- PreReq += permissions
- add sudo-dont-ignore-LDFLAGS.patch
- drop sudo-1.7.1-defaults.diff (insults disabled in sudoers)
- drop sudo-1.7.1-__P.diff (no more __P in sudo sources)
- drop sudo-1.7.1-strip.diff (sudo no longer strips binaries)
- drop sudo-CVE-2011-0010.patch (in upstream)
- drop sudo-1.7.1-secure_path.diff (sudo now adds /sbin and
  /usr/sbin to $PATH if it is empty)
- drop sudo-1.7.1-pam_rhost.diff (fixed in upstream)
- sudo-1.7.1-sudoers.diff renamed to sudo-sudoers.patch
- sudo-1.7.1-env.diff renamed to sudoers2ldif-env.patch
- do not package *.pod files
- use %verifyscript
- timestamp directory moved from /var/run/sudo to /var/lib/sudo
- better commented default /etc/sudoers
- packaged /etc/sudoers.d directory
- new sudo-devel subpackage
- cleaned specfile</changelog>
<changelog author="puzel@novell.com" date="1305892800">- update to sudo-1.8.1p2
  - Two-character CIDR-style IPv4 netmasks are now matched
    correctly in the sudoers file.
  - A non-existent includedir is now treated the same as an empty
    directory and not reported as an error.
  - Removed extraneous parens in LDAP filter when
    sudoers_search_filter is enabled that can cause an LDAP search
    error.
  - A new LDAP setting, sudoers_search_filter, has been added to
    ldap.conf.  This setting can be used to restrict the set of
    records returned by the LDAP query.  Based on changes from
    Matthew Thomas.
  - White space is now permitted within a User_List when used in
    conjunction with a per-user Defaults definition.
  - A group ID (%#gid) may now be specified in a User_List or
    Runas_List.  Likewise, for non-Unix groups the syntax is
    %:#gid.
  - Support for double-quoted words in the sudoers file has been
    fixed.  The change in 1.7.5 for escaping the double quote
    character caused the double quoting to only be available at the
    beginning of an entry.
  - The fix for resuming a suspended shell in 1.7.5 caused problems
    with resuming non-shells on Linux.  Sudo will now save the
    process group ID of the program it is running on suspend and
    restore it when resuming, which fixes both problems.
  - A bug that could result in corrupted output in "sudo -l" has
    been fixed.
  - Sudo will now create an entry in the utmp (or utmpx) file when
    allocating a pseudo-tty (e.g. when logging I/O).  The
    "set_utmp" and "utmp_runas" sudoers file options can be used to
    control this.  Other policy plugins may use the "set_utmp" and
    "utmp_user" entries in the command_info list.
  - The sudoreplay utility now supports arbitrary session IDs.
    Previously, it would only work with the base-36 session IDs
    that the sudoers plugin uses by default.
  - Sudo now passes "run_shell=true" to the policy plugin in the
    settings list when sudo's -s command line option is specified.
    The sudoers policy plugin uses this to implement the "set_home"
    sudoers option which was missing from sudo 1.8.0.
  - The "noexec" functionality has been moved out of the sudoers
    policy plugin and into the sudo front-end, which matches the
    behavior documented in the plugin writer's guide.  As a result,
    the path to the noexec file is now specified in the sudo.conf
    file instead of the sudoers file.
  - The exit values for "sudo -l", "sudo -v" and "sudo -l command"
    have been fixed in the sudoers policy plugin.
  - Sudo now parses command line arguments before loading any
    plugins.  This allows "sudo -V" or "sudo -h" to work even if
    there is a problem with sudo.conf
- drop sudo-dont-ignore-LDFLAGS.patch (merged upstream)</changelog>
<changelog author="prusnak@opensuse.org" date="1318507200">- updated to sudo-1.8.2
  * Sudo, visudo, sudoreplay and the sudoers plug-in now have natural
    language support (NLS). This can be disabled by passing configure
    the --disable-nls option.  Sudo will use gettext(), if available,
    to display translated messages.  All translations are coordinated
    via The Translation Project, http://translationproject.org/.
  * Plug-ins are now loaded with the RTLD_GLOBAL flag instead of
    RTLD_LOCAL.  This fixes missing symbol problems in PAM modules
    on certain platforms, such as FreeBSD and SuSE Linux Enterprise.
  * I/O logging is now supported for commands run in background mode
    (using sudo's -b flag).
  * Group ownership of the sudoers file is now only enforced when
    the file mode on sudoers allows group readability or writability.
  * Visudo now checks the contents of an alias and warns about cycles
    when the alias is expanded.
  * If the user specifes a group via sudo's -g option that matches
    the target user's group in the password database, it is now
    allowed even if no groups are present in the Runas_Spec.
  * The sudo Makefiles now have more complete dependencies which are
    automatically generated instead of being maintained manually.
  * The "use_pty" sudoers option is now correctly passed back to the
    sudo front end.  This was missing in previous versions of sudo
    1.8 which prevented "use_pty" from being honored.
  * "sudo -i command" now works correctly with the bash version
    2.0 and higher.  Previously, the .bash_profile would not be
    sourced prior to running the command unless bash was built with
    NON_INTERACTIVE_LOGIN_SHELLS defined.
  * When matching groups in the sudoers file, sudo will now match
    based on the name of the group instead of the group ID. This can
    substantially reduce the number of group lookups for sudoers
    files that contain a large number of groups.
  * Multi-factor authentication is now supported on AIX.
  * Added support for non-RFC 4517 compliant LDAP servers that require
    that seconds be present in a timestamp, such as Tivoli Directory Server.
  * If the group vector is to be preserved, the PATH search for the
    command is now done with the user's original group vector.
  * For LDAP-based sudoers, the "runas_default" sudoOption now works
    properly in a sudoRole that contains a sudoCommand.
  * Spaces in command line arguments for "sudo -s" and "sudo -i" are
    now escaped with a backslash when checking the security policy.
- added missing include (grp-include.patch)</changelog>
<changelog author="vcizek@suse.com" date="1319457600">- update to sudo-1.8.3
  - Fixed expansion of strftime() escape sequences
    in the log_dir sudoers setting.
  - Esperanto, Italian and Japanese
    translations from translationproject.org.
  - Added --enable-werror configure option for gcc's
  - Werror flag.  - Visudo no longer
    assumes all editors support the +linenumber command line argument.
    It now uses a whitelist of editors known to support the option.
  - Fixed matching of network addresses when a netmask is specified but
    the address is not the first one in the CIDR block.
  - The configure script now check whether or not errno.h declares the
    errno variable. Previously, sudo would always declare errno itself
    for older systems that don't declare it in errno.h.
  - The NOPASSWD tag is now honored for denied commands too,
    which matches historic sudo behavior (prior to sudo 1.7.0).
  - Sudo now honors the DEREF
    setting in ldap.conf which controls how alias dereferencing is done
    during an LDAP search.
  - A symbol conflict with the
    pam_ssh_agent_auth PAM module that would cause a crash been
    resolved.
  - The inability to load a group provider plugin is no
    longer a fatal error.
  - A potential crash in the utmp handling
    code has been fixed.
  - Two PAM session issues have been resolved.
    In previous versions of sudo, the PAM session was opened as one
    user and closed as another. Additionally, if no authentication was
    performed, the PAM session would never be closed.
  - The LOGNAME,
    USER and USERNAME environment variables are preserved correctly
    again in sudoedit mode.
- grp-include.patch no longer needed</changelog>
<changelog author="aj@suse.de" date="1325073600">- Set timedir correctly</changelog>
<changelog author="vcizek@suse.com" date="1325678400">- update to sudo-1.8.3p1
  * Fixed a crash in the monitor process on Solaris when NOPASSWD
    was specified or when authentication was disabled.
  * Fixed matching of a Runas_Alias in the group section of a Runas_Spec.</changelog>
<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>

</package>
<package pkgid="4c89b9209e3ae791f348ac91d26526122e8d06d7aeb3822dae8bb881469440eb" name="sudo-devel" arch="i586">
    <version epoch="0" ver="1.8.6p3" rel="3.5.1"/>

<changelog author="puzel@novell.com" date="1275480000">- add sudo-CVE-2010-1646.patch (bnc#594738)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1276603200">- update to 1.7.2p7:
  * portability fixes
- changes from 1.7.2p6:
  * Handle duplicate variables in the environment
  * visudo: fix a crash when checking a sudoers file that has aliases
    that reference themselves
  * aliases: fix use after free in error message when a duplicate
    alias exists
  * visudo: prevent NULL dereference in printf()
- removed sudo-CVE-2010-1163.patch (merged upstream)
- removed sudo-CVE-2010-1646.patch (merged upstream)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1294920000">- add sudo-CVE-2011-0010.patch (bnc#663881)</changelog>
<changelog author="cprause@novell.com" date="1296129600">- added openldap schema file (bnc#667558)</changelog>
<changelog author="puzel@novell.com" date="1300363200">- update to sudo-1.8.0
  * Sudo has been refactored to use a modular framework that can
    support third-party policy and I/O logging plugins.
  * Defaults settings that are tied to a user, host or command may
    now include the negation operator. For example:
    Defaults:!millert lecture
    will match any user but millert.
  * The default PATH environment variable, used when no PATH
    variable exists, now includes /usr/sbin and /sbin.
  * Support for logging I/O for the command being run.
  * Sudo will now use the Linux audit system.
  + See /usr/share/doc/packages/sudo/NEWS for full list
- new configure script flags: enable-warnings, with-linux-audit,
  docdir, with-sendmail
- BuildRequires += audit-devel
- BuildRequires -= postfix
- PreReq += permissions
- add sudo-dont-ignore-LDFLAGS.patch
- drop sudo-1.7.1-defaults.diff (insults disabled in sudoers)
- drop sudo-1.7.1-__P.diff (no more __P in sudo sources)
- drop sudo-1.7.1-strip.diff (sudo no longer strips binaries)
- drop sudo-CVE-2011-0010.patch (in upstream)
- drop sudo-1.7.1-secure_path.diff (sudo now adds /sbin and
  /usr/sbin to $PATH if it is empty)
- drop sudo-1.7.1-pam_rhost.diff (fixed in upstream)
- sudo-1.7.1-sudoers.diff renamed to sudo-sudoers.patch
- sudo-1.7.1-env.diff renamed to sudoers2ldif-env.patch
- do not package *.pod files
- use %verifyscript
- timestamp directory moved from /var/run/sudo to /var/lib/sudo
- better commented default /etc/sudoers
- packaged /etc/sudoers.d directory
- new sudo-devel subpackage
- cleaned specfile</changelog>
<changelog author="puzel@novell.com" date="1305892800">- update to sudo-1.8.1p2
  - Two-character CIDR-style IPv4 netmasks are now matched
    correctly in the sudoers file.
  - A non-existent includedir is now treated the same as an empty
    directory and not reported as an error.
  - Removed extraneous parens in LDAP filter when
    sudoers_search_filter is enabled that can cause an LDAP search
    error.
  - A new LDAP setting, sudoers_search_filter, has been added to
    ldap.conf.  This setting can be used to restrict the set of
    records returned by the LDAP query.  Based on changes from
    Matthew Thomas.
  - White space is now permitted within a User_List when used in
    conjunction with a per-user Defaults definition.
  - A group ID (%#gid) may now be specified in a User_List or
    Runas_List.  Likewise, for non-Unix groups the syntax is
    %:#gid.
  - Support for double-quoted words in the sudoers file has been
    fixed.  The change in 1.7.5 for escaping the double quote
    character caused the double quoting to only be available at the
    beginning of an entry.
  - The fix for resuming a suspended shell in 1.7.5 caused problems
    with resuming non-shells on Linux.  Sudo will now save the
    process group ID of the program it is running on suspend and
    restore it when resuming, which fixes both problems.
  - A bug that could result in corrupted output in "sudo -l" has
    been fixed.
  - Sudo will now create an entry in the utmp (or utmpx) file when
    allocating a pseudo-tty (e.g. when logging I/O).  The
    "set_utmp" and "utmp_runas" sudoers file options can be used to
    control this.  Other policy plugins may use the "set_utmp" and
    "utmp_user" entries in the command_info list.
  - The sudoreplay utility now supports arbitrary session IDs.
    Previously, it would only work with the base-36 session IDs
    that the sudoers plugin uses by default.
  - Sudo now passes "run_shell=true" to the policy plugin in the
    settings list when sudo's -s command line option is specified.
    The sudoers policy plugin uses this to implement the "set_home"
    sudoers option which was missing from sudo 1.8.0.
  - The "noexec" functionality has been moved out of the sudoers
    policy plugin and into the sudo front-end, which matches the
    behavior documented in the plugin writer's guide.  As a result,
    the path to the noexec file is now specified in the sudo.conf
    file instead of the sudoers file.
  - The exit values for "sudo -l", "sudo -v" and "sudo -l command"
    have been fixed in the sudoers policy plugin.
  - Sudo now parses command line arguments before loading any
    plugins.  This allows "sudo -V" or "sudo -h" to work even if
    there is a problem with sudo.conf
- drop sudo-dont-ignore-LDFLAGS.patch (merged upstream)</changelog>
<changelog author="prusnak@opensuse.org" date="1318507200">- updated to sudo-1.8.2
  * Sudo, visudo, sudoreplay and the sudoers plug-in now have natural
    language support (NLS). This can be disabled by passing configure
    the --disable-nls option.  Sudo will use gettext(), if available,
    to display translated messages.  All translations are coordinated
    via The Translation Project, http://translationproject.org/.
  * Plug-ins are now loaded with the RTLD_GLOBAL flag instead of
    RTLD_LOCAL.  This fixes missing symbol problems in PAM modules
    on certain platforms, such as FreeBSD and SuSE Linux Enterprise.
  * I/O logging is now supported for commands run in background mode
    (using sudo's -b flag).
  * Group ownership of the sudoers file is now only enforced when
    the file mode on sudoers allows group readability or writability.
  * Visudo now checks the contents of an alias and warns about cycles
    when the alias is expanded.
  * If the user specifes a group via sudo's -g option that matches
    the target user's group in the password database, it is now
    allowed even if no groups are present in the Runas_Spec.
  * The sudo Makefiles now have more complete dependencies which are
    automatically generated instead of being maintained manually.
  * The "use_pty" sudoers option is now correctly passed back to the
    sudo front end.  This was missing in previous versions of sudo
    1.8 which prevented "use_pty" from being honored.
  * "sudo -i command" now works correctly with the bash version
    2.0 and higher.  Previously, the .bash_profile would not be
    sourced prior to running the command unless bash was built with
    NON_INTERACTIVE_LOGIN_SHELLS defined.
  * When matching groups in the sudoers file, sudo will now match
    based on the name of the group instead of the group ID. This can
    substantially reduce the number of group lookups for sudoers
    files that contain a large number of groups.
  * Multi-factor authentication is now supported on AIX.
  * Added support for non-RFC 4517 compliant LDAP servers that require
    that seconds be present in a timestamp, such as Tivoli Directory Server.
  * If the group vector is to be preserved, the PATH search for the
    command is now done with the user's original group vector.
  * For LDAP-based sudoers, the "runas_default" sudoOption now works
    properly in a sudoRole that contains a sudoCommand.
  * Spaces in command line arguments for "sudo -s" and "sudo -i" are
    now escaped with a backslash when checking the security policy.
- added missing include (grp-include.patch)</changelog>
<changelog author="vcizek@suse.com" date="1319457600">- update to sudo-1.8.3
  - Fixed expansion of strftime() escape sequences
    in the log_dir sudoers setting.
  - Esperanto, Italian and Japanese
    translations from translationproject.org.
  - Added --enable-werror configure option for gcc's
  - Werror flag.  - Visudo no longer
    assumes all editors support the +linenumber command line argument.
    It now uses a whitelist of editors known to support the option.
  - Fixed matching of network addresses when a netmask is specified but
    the address is not the first one in the CIDR block.
  - The configure script now check whether or not errno.h declares the
    errno variable. Previously, sudo would always declare errno itself
    for older systems that don't declare it in errno.h.
  - The NOPASSWD tag is now honored for denied commands too,
    which matches historic sudo behavior (prior to sudo 1.7.0).
  - Sudo now honors the DEREF
    setting in ldap.conf which controls how alias dereferencing is done
    during an LDAP search.
  - A symbol conflict with the
    pam_ssh_agent_auth PAM module that would cause a crash been
    resolved.
  - The inability to load a group provider plugin is no
    longer a fatal error.
  - A potential crash in the utmp handling
    code has been fixed.
  - Two PAM session issues have been resolved.
    In previous versions of sudo, the PAM session was opened as one
    user and closed as another. Additionally, if no authentication was
    performed, the PAM session would never be closed.
  - The LOGNAME,
    USER and USERNAME environment variables are preserved correctly
    again in sudoedit mode.
- grp-include.patch no longer needed</changelog>
<changelog author="aj@suse.de" date="1325073600">- Set timedir correctly</changelog>
<changelog author="vcizek@suse.com" date="1325678400">- update to sudo-1.8.3p1
  * Fixed a crash in the monitor process on Solaris when NOPASSWD
    was specified or when authentication was disabled.
  * Fixed matching of a Runas_Alias in the group section of a Runas_Spec.</changelog>
<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>

</package>
<package pkgid="f2b4c8a26df31b4b61cf29105c0683a13a5a8ef8c31bf9a5cd4c365ad693d902" name="wireshark" arch="i586">
    <version epoch="0" ver="1.8.6" rel="1.4.1"/>

<changelog author="cyliu@novell.com" date="1312977600">- security fixes (#bnc 706728)
  * CVE-2011-2597: Lucent/Ascend file parser susceptible to infinite loop
  * CVE-2011-2698: ANSI MAP dissector susceptible to infinite loop</changelog>
<changelog author="cyliu@novell.com" date="1317038400">- security fixes (#bnc 718032)
  * CVE-2011-3266: Wireshark IKE dissector vulnerability
  * CVE-2011-3360: Wireshark Lua script execution vulnerability
  * CVE-2011-3483: Wireshark buffer exception handling vulnerability</changelog>
<changelog author="tabraham@novell.com" date="1320235200">- update to 1.6.3
  - Security fixes:
  - wnpa-sec-2011-17 The CSN.1 dissector could crash. (Bug 6351)
  - Bug fixes:
  - Wireshark window takes very long time to show up if invalid
    network file path is at recent file list (Bug 3810)
  - ISUP party number dissection. (Bug 5221)
  - Ethernet packets with both VLAN tag and LLC header no longer
    displayed correctly. (Bug 5645)
  - SLL encapsuled 802.1Q VLAN is not dissected. (Bug 5680)
  - Dissection fails for frames with Gigamon Header and VLAN. (Bug 6305)
  - RTP Stream Analysis does not work for TURN-encapsulated RTP. (Bug 6322)
  - packet-csn1.c doesn't process CSN_CHOICE entries properly. (Bug 6328)
  - GUI crash on invalid IEEE 802.11 GAS frame. (Bug 6345)
  - ICMPv6 router advertisement Prefix Information Flag R "Router
    Address" missing. (Bug 6350)
  - Inner tag of 802.1ad frames not parsed properly. (Bug 6366)
  - Added cursor type decoding to MySQL dissector. (Bug 6396)
  - WPA IE pairwise cipher suite dissector uses incorrect value_string
    list. (Bug 6420)
  - text_import_scanner.l missing. (Bug 6531)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACnet, CSN.1, DTN, Ethernet, ICMPv6, IEEE 802.11,
    IEEE 802.1q, Infiniband, IPsec, MySQL, PCEP, PN-RT, RTP, S1AP, SSL
  - New and Updated capture file suppport:
  - Endace ERF.
- update to 1.6.2
  - Security fixes:
  - wnpa-sec-2011-12 A large loop in the OpenSafety dissector could
    cause a crash. (Bug 6138)
  - wnpa-sec-2011-16 The CSN.1 dissector could crash. (Bug 6139)
  - Bug fixes:
  - configure ignores (partially) LDFLAGS. (Bug 5607)
  - Build fails when it tries to #include &lt;getopt.h&gt;, not present in
    Solaris 9. (Bug 5608)
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - BACnet who-is request device range values are not decoded correctly
    in the packet details window. (Bug 5769)
  - Wireshark crashes if sercosiii module isn't installed. (Bug 6006)
  - Editcap could create invalid pcap files when converting from JPEG.
    (Bug 6010)
  - Timestamp is incorrectly decoded for ICMP Timestamp Response packets
    from MS Windows. (Bug 6114)
  - Wrong display of CSN_BIT in CSN.1. (Bug 6151)
  - Fix CSN_RECURSIVE_TARRAY last bit error in packet-csn1.c. (Bug 6166)
  - Wireshark cannot display Reachable time &amp; Retrans timer in IPv6 RA
    messages. (Bug 6168)
  - ReadPropertyMultiple-ACK not correctly dissected. (Bug 6178)
  - GTPv2 dissectors should treat gtpv2_ccrsi as optional. (Bug 6183)
  - tshark run with -Tpdml makes a seg fault. (Bug 6245)
  - TShark/dumpcap skips capture duration flag occasionally. (Bug 6280)
  - Wireshark improperly parsing 802.11 Beacon Country Information
    tag. (Bug 6264)
  - Wrong display of CSN_BIT under CSN_UNION. (Bug 6287)
  - Updated protocol support:
  - BACapp, Bluetooth L2CAP, CSN.1, DCERPC, GSM A RR, GTPv2, ICMP,
    ICMPv6, IKE, MEGACO, MSISDN, NDMP, OpenSafety, RTPS2, sFlow, SNMP, TCP
  - New and Updated capture file suppport:
  - CommView, pcap-ng, JPEG.
- update to 1.6.1
  - Security fixes:
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is
    not correct in wireshark's user guide. (Bug 5199)
  - Character echo pauses in Capture Filter field in Capture Options.
    (Bug 5356)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many .
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing arguments.
    (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while the
    "default" field does nothing . (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem without
    tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - Cannot Live-capture VirtualBox network packets with Wireshark; pipe
    problem. (Bug 6002)
  - Interface list in Capture Options isn't cleared when selecting other
    host. (Bug 6008)
  - H323 rate multiplier wrong. (Bug 6009)
  - Inclusion of config.h is too late in lex-files resulting in wrong
    definition of _FILE_OFFSET_BITS. (Bug 6012)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - Crash after applying "expert.severity" field as column. (Bug 6035)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - Wireshark crashes after repeating "File -&gt; Import -&gt; Cancel". (Bug 6080)
  - Decoding of MQ ASCII and EBCDIC Traffic Flow - ASCII shows fine,
    EBCDIC does not. (Bug 6084)
  - 802.11 Association Response Packet's "Status Code" field is imprecisely
    decoded/described. (Bug 6093)
  - Abis interface not correctly handled in gsmtap dissector. (Bug 6097)
  - Wrong decoding of RLC/MAC EGPRS Packet Downlink Ack/Nack (3GPP TS
    44.060). (Bug 6098)
  - CSN Ack/Nack Description wrongly handled in gsm_rlcmac_dl dissector
    (3GPP TS 44.060). (Bug 6101)
  - wireshark 1.6.0 and python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - New and Updated capture file suppport:
  - Network Monitor.
- update to 1.6.0
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Crash when sorting column while capturing. (Bug 4273)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Large file (greater than 2 GB) support has been improved.
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - Wireshark can export SSL session keys via File-&gt;Export-&gt;SSL Session
    Keys...
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI, ICMP and ICMPv6 service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters.
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
    instead of a separate tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors.
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default.
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - Wireshark and TShark can now read compressed Windows Sniffer files.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Broadcast/Multicast Control, Constrained Application Protocol (COAP),
    Digium TDMoE, Erlang Distribution Protocol, Ether-S-I/O, FastCGI, Fibre
    Channel over InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband
    Socket Direct Protocol (SDP), JSON, LISP Control, LISP Data, LISP,
    MikroTik MAC-Telnet, MRP Multiple Mac Registration Protocol (MMRP) Mongo
    Wire Protocol, MUX27010, Network Monitor 802.11 radio header, OPC UA
    ExtensionObjects, openSAFETY, PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD
    Framing, RObust Header Compression (ROHC), RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, USB/AT Commands, uTorrent Transport Protocol, WAI
    authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.5.1
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - TShark can show a specific occurrence of a field when using '-T fields'.
  - Custom columns can show a specific occurrence of a field.
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Constrained Application Protocol (COAP), Digium TDMoE, Erlang
    Distribution Protocol, Ether-S-I/O, FastCGI, Fibre Channel over
    InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband Socket
    Direct Protocol (SDP), JSON, LISP Data, MikroTik MAC-Telnet, Mongo Wire
    Protocol, Network Monitor 802.11 radio header, OPC UA ExtensionObjects,
    PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD Framing, RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, WAI authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.4.10
  - Security fixes:
  - wnpa-sec-2011-18 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered that the Infiniband dissector could
    dereference a NULL pointer. (Bug 6476)
  - wnpa-sec-2011-19 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered a buffer overflow in the ERF file
    reader. (Bug 6479)
  - Bug fixes:
  - Assertion failed when doing File-&gt;Quit-&gt;Save during live
    capture. (Bug 1710)
  - Wrong PCEP XRO sub-object decoding. (Bug 3778)
  - Decoding [Status Records] Timestamp Sequence Field in Bundle
    Protocol fails if over 32 bits. (Bug 4109)
  - wireshark-1.4.2 crashes when testing the example python
    dissector because of a dissector count assertion. (Bug 5431)
  - Wireshark crashes when attempting to open a file via drag &amp; drop
    when there's already a file open. (Bug 5987)
  - Add the ability to save filters from the Filter Toolbar into buttons
    on the Filter Toolbar. (Bug 6207)
  - Adding and removing custom HTTP headers requires a restart. (Bug 6241)
  - Can't read full 64-bit SNMP values. (Bug 6295)
  - BACnet property time-synchronization-interval (204) name shown
    incorrectly as time-synchronization-recipients. (Bug 6336)
  - [ASN.1 PER] Incorrect decoding of BIT STRING type. (Bug 6347)
  - Export-&gt;Object-&gt;HTTP-&gt; save all: Error on saving files. (Bug 6362)
  - Incorrect identification of UDP-encapsulated NAT-keepalive
    packets. (Bug 6414)
  - S1AP protocol can't decode IPv6 transportLayerAddress. (Bug 6435)
  - RTPS2 dissector doesn't handle 0 in the octestToNextHeader field.
    (Bug 6449)
  - packet-ajp13 fix, cleanup, and enhancement. (Bug 6452)
  - Network Instruments Observer file format bugs. (Bug 6453)
  - Wireshark crashes when using "Open Recent" 2 times in a row. (Bug 6457)
  - Wireshark packet_gsm-sms, display bug: Filler bits in TP-User Data
    Header. (Bug 6469)
  - wireshark unable to decode NetFlow options which have system scope
    size != 4 bytes. (Bug 6471)
  - Display filter Expression Dialog Box Error. (Bug 6472)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACapp, DTN, GSM SMS, Infiniband, IPsec, NetFlow,
    PCEP, RTPS2
- update to 1.4.9
  - Security fixes:
  - wnpa-sec-2011-13 A malformed IKE packet could consume excessive
    resources.
  - wnpa-sec-2011-14 A malformed capture file could result in an invalid
    root tvbuff and cause a crash. (Bug 6135) CVE-2011-3266
  - wnpa-sec-2011-15 Wireshark could run arbitrary Lua scripts. (Bug 6136)
  - Bug fixes:
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - H.323 RAS packets missing from packet counts in "Telephony-&gt;VoIP
    Calls" and the "Flow Graph" for the call. (Bug 5848)
  - Malformed Packet in decode for BGP-AD update. (Bug 6122)
  - BGP : AS_PATH attribute was decode wrong. (Bug 6188)
  - Fixes for SCPS TCP option. (Bug 6194)
  - Offset calculated incorrectly for sFlow extended data. (Bug 6219)
  - [Enter] key behavior varies when manually typing display filters.
    (Bug 6228)
  - Contents of pcapng EnhancedPacketBlocks with comments aren't
    displayed. (Bug 6229)
  - Misdecoding 3G Neighbour Cell Information Element in SI2quater
    message due to a coding typo. (Bug 6237)
  - Mis-spelled word "unknown" in assorted files. (Bug 6244)
  - btl2cap extended window shows wrong bit. (Bug 6257)
  - NDMP dissector incorrectly represents "ndmp.bytes_left_to_read"
    as signed. (Bug 6262)
  - ERF records with extension headers not written out correctly to
    pcap or pcap-ng files. (Bug 6265)
  - RTPS2: MAX_BITMAP_SIZE is defined incorrectly. (Bug 6276)
  - Copying from RTP stream analysis copies 1st line many times. (Bug 6279)
  - File types with no snaplen written out with a zero snaplen in pcap-ng
    files. (Bug 6289)
  - MEGACO context tracking fix - context id reuse. (Bug 6311)
  - Updated protocol support:
  - BGP, Bluetooth L2CAP, GSM A RR, H.225, IKE, MEGACO, NDMP, RTPS2, SCPS,
    sFlow, SNMP
  - New and Updated capture file suppport:
  - CommView, pcap-ng.
  - update to 1.4.8
  - Security fixes:
  - CVE-2011-2597 The Lucent/Ascend file parser was susceptible to an
    infinite loop.
  - The ANSI MAP dissector was susceptible to an infinite loop. (Bug 6044)
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - Wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is not
    correct in wireshark's user guide. (Bug 5199)
  - sflow decode error for some extended formats. (Bug 5379)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many.
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing
    arguments. (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while
    the "default" field does nothing. (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem
    without tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - H323 rate multiplier wrong. (Bug 6009)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - 802.11 Association Response Packet's "Status Code" field is
    imprecisely decoded/described. (Bug 6093)
  - Wireshark 1.6.0 and Python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - Updated protocol support:
  - ANSI MAP, GIOP, H.323, IEEE 802.11, MSRP, RPCAP, sFlow, TCP
  - New and Updated capture file suppport:
  - Lucent/Ascend
  - update to 1.4.7
  - Security fixes:
  - Large/infinite loop in the DICOM dissector. (Bug 5876)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Diameter dictionary file could crash Wireshark.
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted snoop file could crash Wireshark. (Bug 5912)
  - David Maciejak of Fortinet's FortiGuard Labs discovered that malformed
    compressed capture data could crash Wireshark. (Bug 5908)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Visual Networks file could crash Wireshark. (Bug 5934)
  - Bug fixes:
  - AIM dissector has some endian issues. (Bug 5464)
  - Telephony-&gt;MTP3-&gt;MSUS doesn't display window. (Bug 5605)
  - Support for MS NetMon 3.x traces containing raw IPv6 ("Type 7")
    packets. (Bug 5817)
  - Service Indicator in M3UA protocol data. (Bug 5834)
  - IEC60870-5-104 protocol, incorrect decoding of timestamp type
    CP56Time2a. (Bug 5889)
  - DNP3 dissector incorrect constants AL_OBJ_FCTR_16NF _FDCTR_32NF
    _FDCTR_16NF. (Bug 5920)
  - 3GPP QoS: Traffic class is not decoded properly. (Bug 5928)
  - Wireshark crashes when creating ProtoField.framenum in Lua. (Bug 5930)
  - Fix a wrong mask to extract FMID from DECT packets dissector. (Bug 5947)
  - Incorrect DHCPv6 remote identifier option parsing. (Bug 5962)
  - Updated protocol support:
  - DICOM, IEC104, M3UA, TCP
  - New and Updated capture file suppport:
  - Network Monitor
- Drop patches (fixed upstream):
  + wireshark-1.6.2-CVE-2011-3483.patch
  + wireshark-1.6.2-CVE-2011-3360.patch
  + wireshark-1.6.2-CVE-2011-3266.patch
  + wireshark-1.4.8-CVE-2011-2698.patch
  + wireshark-1.4.8-CVE-2011-2597.patch
  + wireshark-1.2.17-CVE-2011-2175.patch
  + wireshark-1.2.17-CVE-2011-2174.patch
  + wireshark-1.2.17-CVE-2011-1959.patch
  + wireshark-1.2.17-CVE-2011-1958.patch
  + wireshark-1.2.17-CVE-2011-1957.patch
  + wireshark-nfsv4-opts.patch
- changed spec to resolve rpmlint warning regarding devel package in
  non-devel group
- changed spec to resolve rpmlint warnings regarding macro-in-comment</changelog>
<changelog author="cyliu@suse.com" date="1326801600">- update to 1.6.5
  - Security fixes:
  - wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to
    properly check record sizes for many packet capture file formats.
    (Bug 6663, bug 6666, bug 6667, bug 6668, bug 6669, bug 6670)
  - wnpa-sec-2012-02  Wireshark could dereference a NULL pointer and
    crash. (Bug 6634)
  - wnpa-sec-2012-03  The RLC dissector could overflow a buffer. (Bug 6391)
  - Bug fixes:
  - "Closing File!" Dialog Hangs. (Bug 3046)
  - Sub-fields of data field should appear in exported PDML as children
    of the data field instead of as siblings to it. (Bug 3809)
  - Incorrect time differences displayed with time reference set. (Bug 5580)
  - Wrong packet type association of SNMP trap after TFTP transfer. (Bug 5727)
  - SSL/TLS decryption needs wireshark to be rebooted. (Bug 6032)
  - Export HTTP Objects -&gt; save all crashes Wireshark. (Bug 6250)
  - Wireshark Netflow dissector complains there is no template found though
    the template is exported. (Bug 6325)
  - DCERPC EPM tower UUID must be interpreted always as little endian.
    (Bug 6368)
  - Crash if no recent files. (Bug 6549)
  - IPv6 frame containing routing header with 0 segments left calculates wrong
    UDP checksum. (Bug 6560)
  - IPv4 UDP/TCP Checksum incorrect if routing header present. (Bug 6561)
  - Incorrect Parsing of SCPS Capabilities Option introduced in response
    to bug 6194. (Bug 6562)
  - Various crashes after loading NetMon2.x capture file. (Bug 6578)
  - Fixed compilation of dumpcap on some systems (when MUST_DO_SELECT is
    defined). (Bug 6614)
  - SIGSEGV in SVN 40046. (Bug 6634)
  - Wireshark dissects TCP option 25 as an "April 1" option. (Bug 6643)
  - ZigBee ZCL Dissector reports invalid status. (Bug 6649)
  - ICMPv6 DNSSL option malformed on padding. (Bug 6660)
  - Wrong tvb_get_bits function call in packet-csn1.c. (Bug 6708)
  - [UDP] - Length Field of Pseudo Header while computing CheckSum is not
    correct. (Bug 6711)
  - pcapio.c: bug in libpcap_write_interface_description_block. (Bug 6719)
  - Memory leaks in various dissectors.
  - Bytes highlighted in wrong Byte pane when field selected in Details pane.
  - Updated Protocol Support
  - BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management,
    H245 HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6,
    ISAKMP KERBEROS LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP
    SSL SYSLOG TCP, UDP, XML ZigBee ZCL
  - New and Updated Capture File Support
  - Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network
    Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer, Tektronix
    K12, WildPackets {Airo,Ether}Peek.
- update to 1.6.4
  - Bug fixes:
  - Patch to fix memory leaks/errors in Lua plugin. (Bug 5575)
  - Wireshark crashes if a field of type BASE_CUSTOM is applied as a
    column. (Bug 6503)
  - Filter Expression dialog can only be opened once. (Bug 6537)
  - Wireshark crashes if compiled without GLib thread support. (Bug 6540)
  - 80211 QoS Control: Add Raw TID. (Bug 6548)
  - SNMP length check error. (Bug 6564)
  - UCP dissector bug of operation 61. (Bug 6570)
- fix bnc#741187, #741188, #741190</changelog>
<changelog author="asn@cryptomilk.org" date="1330603200">- Add known bit for Netlogon ServerAutheticate2 flags.</changelog>
<changelog author="zaitor@opensuse.org" date="1333281600">- Update to version 1.6.6:
  + wnpa-sec-2012-04: The ANSI A dissector could dereference a NULL
    pointer and crash. (Bug 6823)
  + wnpa-sec-2012-05: The IEEE 802.11 dissector could go into an
    infinite loop. (Bug 6809)
  + wnpa-sec-2012-06: The pcap and pcap-ng file parsers could crash
    trying to read ERF data. (Bug 6804)
  + wnpa-sec-2012-07: The MP2T dissector could try to allocate too
    much memory and crash. (Bug 6804)
  + The Windows installers now include GnuTLS 1.12.18, which fixes
    several vulnerabilities.
  + Bugs fixed:
  - ISO SSAP: ActivityStart: Invalid decoding the activity
    parameter as a BER Integer. (Bug 2873)
  - Forward slashes in URI need to be converted to backslashes if
    WIN32. (Bug 5237)
  - Character echo pauses in Capture Filter field in Capture
    Options. (Bug 5356)
  - Some PGM options are not parsed correctly. (Bug 5687)
  - dumpcap crashes when capturing from pipe to a pcap-ng file
    (e.g., when passing data from CACE Pilot to Wireshark). (Bug
    5939)
  - Unable to rearrange columns in preferences on Windows. (Bug
    6077) (Note: this bug still affects the 64-bit package)
  - No error for UDP/IPv6 packet with zero checksum. (Bug 6232)
  - Wireshark installer doesn't add access_bpf in 10.5.8. (Bug
    6526)
  - Corrupted Diameter dictionary file that crashes Wireshark.
    (Bug 6664)
  - packetBB dissector bug: More than 1000000 items in the tree
    possible infinite loop. (Bug 6687)
  - ZEP dissector: Timestamp not always displayed correctly.
    Fractional seconds never displayed. (Bug 6703)
  - GOOSE Messages don't use the length field to perform the
    dissection. (Bug 6734)
  - Ethernet traces in K12 text format sometimes give bogus
    "malformed frame" errors and other problems. (Bug 6735)
  - max_ul_ext isn't printed/decoded to the packet details log in
    GTP protocol packet. (Bug 6761)
  - non-IPP packets to or from port 631 are dissected as IPP.
    (Bug 6765)
  - lua proto registration fails for uppercase proto /
    g_ascii_strdown problem. (Bug 6766)
  - no menu item Fle-&gt;Export-&gt;SSL Session Keys in GTK. (Bug 6813)
  - IAX2 dissector reads past end of packet for unknown IEs. (Bug
    6815)
  - TShark 1.6.5 immediately crashes on SSL decryption (every
    time). (Bug 6817)
  - USB: unknown GET DESCRIPTOR response triggers assert failure.
    (Bug 6826)
  - IEEE1588 PTPv2 over IPv6. (Bug 6836)
  - Patch to fix DTLS decryption. (Bug 6847)
  - Expression... dialog crash. (Bug 6891)
  - display filter "gtp.msisdn" not working. (Bug 6947)
  - Multiprotocol Label Switching Echo - Return Code: Reserved(5)
    (Bug 6951)
  - ISAKMP : VendorID CheckPoint : Malformed Packet. (Bug 6972)
  - Adding a Custom HTTP Header Field with a trailing colon
    causes wireshark to immediately crash (and crash upon
    restart). (Bug 6982)
  - Radiotap dissector lists a bogus "DBM TX Attenuation" bit.
    (Bug 7000)
  - MySQL dissector assertion. (Ask 8649)
  - Radiotap header format data rate alignment issues. (Ask 8649)</changelog>
<changelog author="reddwarf@opensuse.org" date="1334404800">- Update to version 1.6.7:
  + Bugs fixed:
  - Malformed Packets H263-1996 (RFC2190). (Bug 6996)
  - Wireshark could crash while trying to open an rpcap: URL.
    (Bug 6922)
  + Updated H.263 Protocol Support</changelog>
<changelog author="andreas.stieger@gmx.de" date="1337688000">- adjust wireshark-corosync-packet-dissector.patch for source changes
- update to upstream 1.6.8
  + security fixes
  * wnpa-sec-2012-08 / CVE-2012-2392
    Infinite and large loops in the ANSI MAP, ASF, BACapp,
    Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 dissectors
    have been fixed. Discovered by Laurent Butti. (Bugs 6805,
    7118, 7119, 7120, 7121, 7122, 7124, 7125)
  * wnpa-sec-2012-09 / CVE-2012-2393
    The DIAMETER dissector could try to allocate memory improperly
    and crash. (Bug 7138)
  * wnpa-sec-2012-10 / CVE-2012-2394
    Wireshark could crash on SPARC processors due to misaligned
    memory. Discovered by Klaus Heckelmann. (Bug 7221)
  + bug fixes
  * User-Password - PAP decoding passwords longer than 16 bytes.
    (Bug 6779)
  * The MSISDN is not seen correctly in GTP packet. (Bug 7042)
  * Wireshark doesn't calculate the right IPv4 destination using
    source routing options when bad options precede them. (Bug
    7043)
  * BOOTP dissector issue with DHCP option 82 - suboption 9. (Bug
    7047)
  * MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW
    packets. (Bug 7089)
  * ANSI MAP infinite loop. (Bug 7119)
  * HCIEVT infinite loop. (Bug 7122)
  * Wireshark doesn't decode NFSv4.1 operations. (Bug 7127)
  * LTP infinite loop. (Bug 7124)
  * Wrong values in DNS CERT RR. (Bug 7130)
  * Megaco parser problem with LF in header. (Bug 7198)
  * OPC UA bytestring node id decoding is wrong. (Bug 7226)
  + Updated Protocol Support
    ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP,
    IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA,
    RADIUS
  + New and Updated Capture File Support
    5View, CSIDS, pcap, pcap-ng</changelog>
<changelog author="opensuse@sukimashita.com" date="1338724800">- Add all known headers to devel package in order to make it
  actually useable and allow building dissectors externally</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340366400">- update to upstream 1.8.0:
  * supports capturing from multiple interfaces at once.
  * add, edit, and save packet and capture file annotations.
  * pcap-ng file format is default
  * Decryption key management for IEEE 802.11, IPsec, and ISAKMP
    is easier.
  * GeoIP IPv6 databases are now supported.
  * large number of protocol dissectors added and updated
  * support for many capture file formats added and updated
  For a full list refer to the release notes:
  https://www.wireshark.org/docs/relnotes/wireshark-1.8.0.html
- drop wireshark-corosync-packet-dissector.patch, no longer compiles
  even after updating
- drop wireshark-1.6.5-netlogon-aes.patch, applied upstream
- drop idl2wrs command from -devel package
- update header files in include.filelist
- refresh wireshark-1.2.0-disable-warning-dialog.patch
- refresh wireshark-1.2.0-geoip.patch
- add wireshark-1.8.0-gmodule.patch to fix linking in factory</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343131200">- update to upstream 1.8.1 (bnc#772738)
  + vulnerabilities fixed:
  * The PPP dissector could crash
    (wnpa-sec-2012-11 CVE-2012-4048)
  * The NFS dissector could use excessive amounts of CPU
    (wnpa-sec-2012-12 CVE-2012-4049)
  + bug fixes:
  * Wireshark crashes on bootp filter
  * Wireshark &gt; 1.4 does not correctly read Association ID for PS
    Poll packets
  * Radius-EAP broken since 1.8.0 release
  * SNMP incorrectly marks SNMPv3 "discovery" packet as malformed
  * Widgets are not properly expanded in GTK3
  * Find Next Mark duplicated on Edit Menu
  * DVB-CI/CI+: fix offset error in operator_info apdu
  * Unable to correctly identify IEC 61850 MMS packets
  * WinPcap doesn't install if vcredist_x64 requires reboot
- remove wireshark-1.8.0-gmodule.patch, fixed upstream</changelog>
<changelog author="andreas.stieger@gmx.de" date="1345032000">- update to upstream 1.8.2 (bnc#776083)
  + vulnerabilities fixed:
  * The DCP ETSI dissector could trigger a zero division.
    (wnpa-sec-2012-13 CVE-2012-4285)
  * The MongoDB dissector could go into a large loop.
    (wnpa-sec-2012-14 CVE-2012-4287)
  * The XTP dissector could go into an infinite loop.
    (wnpa-sec-2012-15 CVE-2012-4288)
  * The ERF dissector could overflow a buffer.
    (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295)
  * The AFP dissector could go into a large loop.
    (wnpa-sec-2012-17 CVE-2012-4289)
  * The RTPS2 dissector could overflow a buffer.
    (wnpa-sec-2012-18 CVE-2012-4296)
  * The GSM RLC MAC dissector could overflow a buffer.
    (wnpa-sec-2012-19 CVE-2012-4297)
  * The CIP dissector could exhaust system memory.
    (wnpa-sec-2012-20 CVE-2012-4291)
  * The STUN dissector could crash.
    (wnpa-sec-2012-21 CVE-2012-4292)
  * The EtherCAT Mailbox dissector could abort.
    (wnpa-sec-2012-22 CVE-2012-4293)
  * The CTDB dissector could go into a large loop.
    (wnpa-sec-2012-23 CVE-2012-4290)
  * The pcap-ng file parser could trigger a zero division.
    (wnpa-sec-2012-24 CVE-2012-4286)
  * The Ixia IxVeriWave file parser could overflow a buffer.
    (wnpa-sec-2012-25 CVE-2012-4298)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.html
- adjust wireshark-1.2.0-disable-warning-dialog.patch for moved lines</changelog>
<changelog author="cfarrell@suse.com" date="1346414400">- license update: GPL-2.0+ and GPL-3.0+
  According to the COPYING file the PIDL utility (standalone tool) is
  GPL-3.0+ licensed</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to upstream 1.8.3 (bnc#783275)
  + vulnerabilities fixed:
  * The HSRP dissector could go into an infinite loop.
    (wnpa-sec-2012-26 CVE-2012-5237)
  * The PPP dissector could abort.
    (wnpa-sec-2012-27 CVE-2012-5238)
  * Martin Wilck discovered an infinite loop in the DRDA dissector.
    (wnpa-sec-2012-28 CVE-2012-5239 CVE-2012-3548 bnc#778000)
  * Laurent Butti discovered a buffer overflow in the LDP dissector.
    (wnpa-sec-2012-29 CVE-2012-5240)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.3.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1352894400">- for openSUSE 12.2 and later, build against lua51-devel instead
  of lua-devel for Lua support (bnc#780669)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354190400">- update to 1.8.4 [bnc#792005]
  + vulnerabilities fixed:
  * Wireshark could leak potentially sensitive host name
    resolution information when working with multiple pcap-ng
    files.
    wnpa-sec-2012-30 CVE-2012-5592
  * The USB dissector could go into an infinite loop.
    wnpa-sec-2012-31 CVE-2012-5593
  * The sFlow dissector could go into an infinite loop.
    wnpa-sec-2012-32 CVE-2012-5594
  * The SCTP dissector could go into an infinite loop.
    wnpa-sec-2012-33 CVE-2012-5595
  * The EIGRP dissector could go into an infinite loop.
    wnpa-sec-2012-34 CVE-2012-5596
  * The ISAKMP dissector could crash.
    wnpa-sec-2012-35 CVE-2012-5597
  * The iSCSI dissector could go into an infinite loop.
    wnpa-sec-2012-36 CVE-2012-5598
  * The WTP dissector could go into an infinite loop.
    wnpa-sec-2012-37 CVE-2012-5599
  * The RTCP dissector could go into an infinite loop.
    wnpa-sec-2012-38 CVE-2012-5600
  * The 3GPP2 A11 dissector could go into an infinite loop.
    wnpa-sec-2012-39 CVE-2012-5601
  * The ICMPv6 dissector could go into an infinite loop.
    wnpa-sec-2012-40 CVE-2012-5602
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add wireshark-suidflags.patch: Allow to pass SUID_{C,LD}FLAGS to
  introduce -fPIE -pie as needed for suid binaries
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.
- Export SUID_{C,LD}FLAGS with appropriate flags.</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- build with gtk3 on 11.4+
- disable zlib makes a sense for 1.2.5 only
- turn some features on (python, gcrypt, gnutls, plugins dir)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1359633600">- update to 1.8.5 [bnc#801131]
  + vulnerabilities fixed:
  * Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI
    DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS,
    SDP, and SIP dissectors
    wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574
    CVE-2013-1575 CVE-2013-1576 CVE-2013-1577 CVE-2013-1578
    CVE-2013-1579 CVE-2013-1580 CVE-2013-1581
  * The CLNP dissector could crash
    wnpa-sec-2013-02 CVE-2013-1582
  * The DTN dissector could crash
    wnpa-sec-2013-03 CVE-2013-1583 CVE-2013-1584
  * The MS-MMC dissector (and possibly others) could crash
    wnpa-sec-2013-04 CVE-2013-1585
  * The DTLS dissector could crash
    wnpa-sec-2013-05 CVE-2013-1586
  * The ROHC dissector could crash
    wnpa-sec-2013-06 CVE-2013-1587
  * The DCP-ETSI dissector could corrupt memory
    wnpa-sec-2013-07 CVE-2013-1588
  * The Wireshark dissection engine could crash
    wnpa-sec-2013-08 CVE-2013-1589
  * The NTLMSSP dissector could overflow a buffer
    wnpa-sec-2013-09 CVE-2013-1590
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1362657600">- update to 1.8.6 [bnc#807942]
  + vulnerabilities fixed:
  * The TCP dissector could crash.
    wnpa-sec-2013-10 CVE-2013-2475
  * The HART/IP dissectory could go into an infinite loop.
    wnpa-sec-2013-11 CVE-2013-2476
  * The CSN.1 dissector could crash.
    wnpa-sec-2013-12 CVE-2013-2477
  * The MS-MMS dissector could crash.
    wnpa-sec-2013-13 CVE-2013-2478
  * The MPLS Echo dissector could go into an infinite loop.
    wnpa-sec-2013-14 CVE-2013-2479
  * The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15 CVE-2013-2480
  * The Mount dissector could crash.
    wnpa-sec-2013-16 CVE-2013-2481
  * The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17 CVE-2013-2482
  * The ACN dissector could attempt to divide by zero.
    wnpa-sec-2013-18 CVE-2013-2483
  * The CIMD dissector could crash.
    wnpa-sec-2013-19 CVE-2013-2484
  * The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20 CVE-2013-2485
  * The RELOAD dissector could go into an infinite loop.
    wnpa-sec-2013-21 CVE-2013-2486 CVE-2013-2487
  * The DTLS dissector could crash.
    wnpa-sec-2013-22 CVE-2013-2488
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html</changelog>

</package>
<package pkgid="6fbee545b9151039b124133b7453c836b3ca05d4aa07f5e5477e862b7767cccd" name="wireshark-devel" arch="i586">
    <version epoch="0" ver="1.8.6" rel="1.4.1"/>

<changelog author="cyliu@novell.com" date="1312977600">- security fixes (#bnc 706728)
  * CVE-2011-2597: Lucent/Ascend file parser susceptible to infinite loop
  * CVE-2011-2698: ANSI MAP dissector susceptible to infinite loop</changelog>
<changelog author="cyliu@novell.com" date="1317038400">- security fixes (#bnc 718032)
  * CVE-2011-3266: Wireshark IKE dissector vulnerability
  * CVE-2011-3360: Wireshark Lua script execution vulnerability
  * CVE-2011-3483: Wireshark buffer exception handling vulnerability</changelog>
<changelog author="tabraham@novell.com" date="1320235200">- update to 1.6.3
  - Security fixes:
  - wnpa-sec-2011-17 The CSN.1 dissector could crash. (Bug 6351)
  - Bug fixes:
  - Wireshark window takes very long time to show up if invalid
    network file path is at recent file list (Bug 3810)
  - ISUP party number dissection. (Bug 5221)
  - Ethernet packets with both VLAN tag and LLC header no longer
    displayed correctly. (Bug 5645)
  - SLL encapsuled 802.1Q VLAN is not dissected. (Bug 5680)
  - Dissection fails for frames with Gigamon Header and VLAN. (Bug 6305)
  - RTP Stream Analysis does not work for TURN-encapsulated RTP. (Bug 6322)
  - packet-csn1.c doesn't process CSN_CHOICE entries properly. (Bug 6328)
  - GUI crash on invalid IEEE 802.11 GAS frame. (Bug 6345)
  - ICMPv6 router advertisement Prefix Information Flag R "Router
    Address" missing. (Bug 6350)
  - Inner tag of 802.1ad frames not parsed properly. (Bug 6366)
  - Added cursor type decoding to MySQL dissector. (Bug 6396)
  - WPA IE pairwise cipher suite dissector uses incorrect value_string
    list. (Bug 6420)
  - text_import_scanner.l missing. (Bug 6531)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACnet, CSN.1, DTN, Ethernet, ICMPv6, IEEE 802.11,
    IEEE 802.1q, Infiniband, IPsec, MySQL, PCEP, PN-RT, RTP, S1AP, SSL
  - New and Updated capture file suppport:
  - Endace ERF.
- update to 1.6.2
  - Security fixes:
  - wnpa-sec-2011-12 A large loop in the OpenSafety dissector could
    cause a crash. (Bug 6138)
  - wnpa-sec-2011-16 The CSN.1 dissector could crash. (Bug 6139)
  - Bug fixes:
  - configure ignores (partially) LDFLAGS. (Bug 5607)
  - Build fails when it tries to #include &lt;getopt.h&gt;, not present in
    Solaris 9. (Bug 5608)
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - BACnet who-is request device range values are not decoded correctly
    in the packet details window. (Bug 5769)
  - Wireshark crashes if sercosiii module isn't installed. (Bug 6006)
  - Editcap could create invalid pcap files when converting from JPEG.
    (Bug 6010)
  - Timestamp is incorrectly decoded for ICMP Timestamp Response packets
    from MS Windows. (Bug 6114)
  - Wrong display of CSN_BIT in CSN.1. (Bug 6151)
  - Fix CSN_RECURSIVE_TARRAY last bit error in packet-csn1.c. (Bug 6166)
  - Wireshark cannot display Reachable time &amp; Retrans timer in IPv6 RA
    messages. (Bug 6168)
  - ReadPropertyMultiple-ACK not correctly dissected. (Bug 6178)
  - GTPv2 dissectors should treat gtpv2_ccrsi as optional. (Bug 6183)
  - tshark run with -Tpdml makes a seg fault. (Bug 6245)
  - TShark/dumpcap skips capture duration flag occasionally. (Bug 6280)
  - Wireshark improperly parsing 802.11 Beacon Country Information
    tag. (Bug 6264)
  - Wrong display of CSN_BIT under CSN_UNION. (Bug 6287)
  - Updated protocol support:
  - BACapp, Bluetooth L2CAP, CSN.1, DCERPC, GSM A RR, GTPv2, ICMP,
    ICMPv6, IKE, MEGACO, MSISDN, NDMP, OpenSafety, RTPS2, sFlow, SNMP, TCP
  - New and Updated capture file suppport:
  - CommView, pcap-ng, JPEG.
- update to 1.6.1
  - Security fixes:
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is
    not correct in wireshark's user guide. (Bug 5199)
  - Character echo pauses in Capture Filter field in Capture Options.
    (Bug 5356)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many .
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing arguments.
    (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while the
    "default" field does nothing . (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem without
    tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - Cannot Live-capture VirtualBox network packets with Wireshark; pipe
    problem. (Bug 6002)
  - Interface list in Capture Options isn't cleared when selecting other
    host. (Bug 6008)
  - H323 rate multiplier wrong. (Bug 6009)
  - Inclusion of config.h is too late in lex-files resulting in wrong
    definition of _FILE_OFFSET_BITS. (Bug 6012)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - Crash after applying "expert.severity" field as column. (Bug 6035)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - Wireshark crashes after repeating "File -&gt; Import -&gt; Cancel". (Bug 6080)
  - Decoding of MQ ASCII and EBCDIC Traffic Flow - ASCII shows fine,
    EBCDIC does not. (Bug 6084)
  - 802.11 Association Response Packet's "Status Code" field is imprecisely
    decoded/described. (Bug 6093)
  - Abis interface not correctly handled in gsmtap dissector. (Bug 6097)
  - Wrong decoding of RLC/MAC EGPRS Packet Downlink Ack/Nack (3GPP TS
    44.060). (Bug 6098)
  - CSN Ack/Nack Description wrongly handled in gsm_rlcmac_dl dissector
    (3GPP TS 44.060). (Bug 6101)
  - wireshark 1.6.0 and python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - New and Updated capture file suppport:
  - Network Monitor.
- update to 1.6.0
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Crash when sorting column while capturing. (Bug 4273)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Large file (greater than 2 GB) support has been improved.
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - Wireshark can export SSL session keys via File-&gt;Export-&gt;SSL Session
    Keys...
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI, ICMP and ICMPv6 service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters.
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
    instead of a separate tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors.
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default.
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - Wireshark and TShark can now read compressed Windows Sniffer files.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Broadcast/Multicast Control, Constrained Application Protocol (COAP),
    Digium TDMoE, Erlang Distribution Protocol, Ether-S-I/O, FastCGI, Fibre
    Channel over InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband
    Socket Direct Protocol (SDP), JSON, LISP Control, LISP Data, LISP,
    MikroTik MAC-Telnet, MRP Multiple Mac Registration Protocol (MMRP) Mongo
    Wire Protocol, MUX27010, Network Monitor 802.11 radio header, OPC UA
    ExtensionObjects, openSAFETY, PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD
    Framing, RObust Header Compression (ROHC), RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, USB/AT Commands, uTorrent Transport Protocol, WAI
    authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.5.1
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - TShark can show a specific occurrence of a field when using '-T fields'.
  - Custom columns can show a specific occurrence of a field.
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Constrained Application Protocol (COAP), Digium TDMoE, Erlang
    Distribution Protocol, Ether-S-I/O, FastCGI, Fibre Channel over
    InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband Socket
    Direct Protocol (SDP), JSON, LISP Data, MikroTik MAC-Telnet, Mongo Wire
    Protocol, Network Monitor 802.11 radio header, OPC UA ExtensionObjects,
    PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD Framing, RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, WAI authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.4.10
  - Security fixes:
  - wnpa-sec-2011-18 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered that the Infiniband dissector could
    dereference a NULL pointer. (Bug 6476)
  - wnpa-sec-2011-19 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered a buffer overflow in the ERF file
    reader. (Bug 6479)
  - Bug fixes:
  - Assertion failed when doing File-&gt;Quit-&gt;Save during live
    capture. (Bug 1710)
  - Wrong PCEP XRO sub-object decoding. (Bug 3778)
  - Decoding [Status Records] Timestamp Sequence Field in Bundle
    Protocol fails if over 32 bits. (Bug 4109)
  - wireshark-1.4.2 crashes when testing the example python
    dissector because of a dissector count assertion. (Bug 5431)
  - Wireshark crashes when attempting to open a file via drag &amp; drop
    when there's already a file open. (Bug 5987)
  - Add the ability to save filters from the Filter Toolbar into buttons
    on the Filter Toolbar. (Bug 6207)
  - Adding and removing custom HTTP headers requires a restart. (Bug 6241)
  - Can't read full 64-bit SNMP values. (Bug 6295)
  - BACnet property time-synchronization-interval (204) name shown
    incorrectly as time-synchronization-recipients. (Bug 6336)
  - [ASN.1 PER] Incorrect decoding of BIT STRING type. (Bug 6347)
  - Export-&gt;Object-&gt;HTTP-&gt; save all: Error on saving files. (Bug 6362)
  - Incorrect identification of UDP-encapsulated NAT-keepalive
    packets. (Bug 6414)
  - S1AP protocol can't decode IPv6 transportLayerAddress. (Bug 6435)
  - RTPS2 dissector doesn't handle 0 in the octestToNextHeader field.
    (Bug 6449)
  - packet-ajp13 fix, cleanup, and enhancement. (Bug 6452)
  - Network Instruments Observer file format bugs. (Bug 6453)
  - Wireshark crashes when using "Open Recent" 2 times in a row. (Bug 6457)
  - Wireshark packet_gsm-sms, display bug: Filler bits in TP-User Data
    Header. (Bug 6469)
  - wireshark unable to decode NetFlow options which have system scope
    size != 4 bytes. (Bug 6471)
  - Display filter Expression Dialog Box Error. (Bug 6472)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACapp, DTN, GSM SMS, Infiniband, IPsec, NetFlow,
    PCEP, RTPS2
- update to 1.4.9
  - Security fixes:
  - wnpa-sec-2011-13 A malformed IKE packet could consume excessive
    resources.
  - wnpa-sec-2011-14 A malformed capture file could result in an invalid
    root tvbuff and cause a crash. (Bug 6135) CVE-2011-3266
  - wnpa-sec-2011-15 Wireshark could run arbitrary Lua scripts. (Bug 6136)
  - Bug fixes:
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - H.323 RAS packets missing from packet counts in "Telephony-&gt;VoIP
    Calls" and the "Flow Graph" for the call. (Bug 5848)
  - Malformed Packet in decode for BGP-AD update. (Bug 6122)
  - BGP : AS_PATH attribute was decode wrong. (Bug 6188)
  - Fixes for SCPS TCP option. (Bug 6194)
  - Offset calculated incorrectly for sFlow extended data. (Bug 6219)
  - [Enter] key behavior varies when manually typing display filters.
    (Bug 6228)
  - Contents of pcapng EnhancedPacketBlocks with comments aren't
    displayed. (Bug 6229)
  - Misdecoding 3G Neighbour Cell Information Element in SI2quater
    message due to a coding typo. (Bug 6237)
  - Mis-spelled word "unknown" in assorted files. (Bug 6244)
  - btl2cap extended window shows wrong bit. (Bug 6257)
  - NDMP dissector incorrectly represents "ndmp.bytes_left_to_read"
    as signed. (Bug 6262)
  - ERF records with extension headers not written out correctly to
    pcap or pcap-ng files. (Bug 6265)
  - RTPS2: MAX_BITMAP_SIZE is defined incorrectly. (Bug 6276)
  - Copying from RTP stream analysis copies 1st line many times. (Bug 6279)
  - File types with no snaplen written out with a zero snaplen in pcap-ng
    files. (Bug 6289)
  - MEGACO context tracking fix - context id reuse. (Bug 6311)
  - Updated protocol support:
  - BGP, Bluetooth L2CAP, GSM A RR, H.225, IKE, MEGACO, NDMP, RTPS2, SCPS,
    sFlow, SNMP
  - New and Updated capture file suppport:
  - CommView, pcap-ng.
  - update to 1.4.8
  - Security fixes:
  - CVE-2011-2597 The Lucent/Ascend file parser was susceptible to an
    infinite loop.
  - The ANSI MAP dissector was susceptible to an infinite loop. (Bug 6044)
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - Wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is not
    correct in wireshark's user guide. (Bug 5199)
  - sflow decode error for some extended formats. (Bug 5379)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many.
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing
    arguments. (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while
    the "default" field does nothing. (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem
    without tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - H323 rate multiplier wrong. (Bug 6009)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - 802.11 Association Response Packet's "Status Code" field is
    imprecisely decoded/described. (Bug 6093)
  - Wireshark 1.6.0 and Python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - Updated protocol support:
  - ANSI MAP, GIOP, H.323, IEEE 802.11, MSRP, RPCAP, sFlow, TCP
  - New and Updated capture file suppport:
  - Lucent/Ascend
  - update to 1.4.7
  - Security fixes:
  - Large/infinite loop in the DICOM dissector. (Bug 5876)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Diameter dictionary file could crash Wireshark.
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted snoop file could crash Wireshark. (Bug 5912)
  - David Maciejak of Fortinet's FortiGuard Labs discovered that malformed
    compressed capture data could crash Wireshark. (Bug 5908)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Visual Networks file could crash Wireshark. (Bug 5934)
  - Bug fixes:
  - AIM dissector has some endian issues. (Bug 5464)
  - Telephony-&gt;MTP3-&gt;MSUS doesn't display window. (Bug 5605)
  - Support for MS NetMon 3.x traces containing raw IPv6 ("Type 7")
    packets. (Bug 5817)
  - Service Indicator in M3UA protocol data. (Bug 5834)
  - IEC60870-5-104 protocol, incorrect decoding of timestamp type
    CP56Time2a. (Bug 5889)
  - DNP3 dissector incorrect constants AL_OBJ_FCTR_16NF _FDCTR_32NF
    _FDCTR_16NF. (Bug 5920)
  - 3GPP QoS: Traffic class is not decoded properly. (Bug 5928)
  - Wireshark crashes when creating ProtoField.framenum in Lua. (Bug 5930)
  - Fix a wrong mask to extract FMID from DECT packets dissector. (Bug 5947)
  - Incorrect DHCPv6 remote identifier option parsing. (Bug 5962)
  - Updated protocol support:
  - DICOM, IEC104, M3UA, TCP
  - New and Updated capture file suppport:
  - Network Monitor
- Drop patches (fixed upstream):
  + wireshark-1.6.2-CVE-2011-3483.patch
  + wireshark-1.6.2-CVE-2011-3360.patch
  + wireshark-1.6.2-CVE-2011-3266.patch
  + wireshark-1.4.8-CVE-2011-2698.patch
  + wireshark-1.4.8-CVE-2011-2597.patch
  + wireshark-1.2.17-CVE-2011-2175.patch
  + wireshark-1.2.17-CVE-2011-2174.patch
  + wireshark-1.2.17-CVE-2011-1959.patch
  + wireshark-1.2.17-CVE-2011-1958.patch
  + wireshark-1.2.17-CVE-2011-1957.patch
  + wireshark-nfsv4-opts.patch
- changed spec to resolve rpmlint warning regarding devel package in
  non-devel group
- changed spec to resolve rpmlint warnings regarding macro-in-comment</changelog>
<changelog author="cyliu@suse.com" date="1326801600">- update to 1.6.5
  - Security fixes:
  - wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to
    properly check record sizes for many packet capture file formats.
    (Bug 6663, bug 6666, bug 6667, bug 6668, bug 6669, bug 6670)
  - wnpa-sec-2012-02  Wireshark could dereference a NULL pointer and
    crash. (Bug 6634)
  - wnpa-sec-2012-03  The RLC dissector could overflow a buffer. (Bug 6391)
  - Bug fixes:
  - "Closing File!" Dialog Hangs. (Bug 3046)
  - Sub-fields of data field should appear in exported PDML as children
    of the data field instead of as siblings to it. (Bug 3809)
  - Incorrect time differences displayed with time reference set. (Bug 5580)
  - Wrong packet type association of SNMP trap after TFTP transfer. (Bug 5727)
  - SSL/TLS decryption needs wireshark to be rebooted. (Bug 6032)
  - Export HTTP Objects -&gt; save all crashes Wireshark. (Bug 6250)
  - Wireshark Netflow dissector complains there is no template found though
    the template is exported. (Bug 6325)
  - DCERPC EPM tower UUID must be interpreted always as little endian.
    (Bug 6368)
  - Crash if no recent files. (Bug 6549)
  - IPv6 frame containing routing header with 0 segments left calculates wrong
    UDP checksum. (Bug 6560)
  - IPv4 UDP/TCP Checksum incorrect if routing header present. (Bug 6561)
  - Incorrect Parsing of SCPS Capabilities Option introduced in response
    to bug 6194. (Bug 6562)
  - Various crashes after loading NetMon2.x capture file. (Bug 6578)
  - Fixed compilation of dumpcap on some systems (when MUST_DO_SELECT is
    defined). (Bug 6614)
  - SIGSEGV in SVN 40046. (Bug 6634)
  - Wireshark dissects TCP option 25 as an "April 1" option. (Bug 6643)
  - ZigBee ZCL Dissector reports invalid status. (Bug 6649)
  - ICMPv6 DNSSL option malformed on padding. (Bug 6660)
  - Wrong tvb_get_bits function call in packet-csn1.c. (Bug 6708)
  - [UDP] - Length Field of Pseudo Header while computing CheckSum is not
    correct. (Bug 6711)
  - pcapio.c: bug in libpcap_write_interface_description_block. (Bug 6719)
  - Memory leaks in various dissectors.
  - Bytes highlighted in wrong Byte pane when field selected in Details pane.
  - Updated Protocol Support
  - BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management,
    H245 HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6,
    ISAKMP KERBEROS LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP
    SSL SYSLOG TCP, UDP, XML ZigBee ZCL
  - New and Updated Capture File Support
  - Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network
    Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer, Tektronix
    K12, WildPackets {Airo,Ether}Peek.
- update to 1.6.4
  - Bug fixes:
  - Patch to fix memory leaks/errors in Lua plugin. (Bug 5575)
  - Wireshark crashes if a field of type BASE_CUSTOM is applied as a
    column. (Bug 6503)
  - Filter Expression dialog can only be opened once. (Bug 6537)
  - Wireshark crashes if compiled without GLib thread support. (Bug 6540)
  - 80211 QoS Control: Add Raw TID. (Bug 6548)
  - SNMP length check error. (Bug 6564)
  - UCP dissector bug of operation 61. (Bug 6570)
- fix bnc#741187, #741188, #741190</changelog>
<changelog author="asn@cryptomilk.org" date="1330603200">- Add known bit for Netlogon ServerAutheticate2 flags.</changelog>
<changelog author="zaitor@opensuse.org" date="1333281600">- Update to version 1.6.6:
  + wnpa-sec-2012-04: The ANSI A dissector could dereference a NULL
    pointer and crash. (Bug 6823)
  + wnpa-sec-2012-05: The IEEE 802.11 dissector could go into an
    infinite loop. (Bug 6809)
  + wnpa-sec-2012-06: The pcap and pcap-ng file parsers could crash
    trying to read ERF data. (Bug 6804)
  + wnpa-sec-2012-07: The MP2T dissector could try to allocate too
    much memory and crash. (Bug 6804)
  + The Windows installers now include GnuTLS 1.12.18, which fixes
    several vulnerabilities.
  + Bugs fixed:
  - ISO SSAP: ActivityStart: Invalid decoding the activity
    parameter as a BER Integer. (Bug 2873)
  - Forward slashes in URI need to be converted to backslashes if
    WIN32. (Bug 5237)
  - Character echo pauses in Capture Filter field in Capture
    Options. (Bug 5356)
  - Some PGM options are not parsed correctly. (Bug 5687)
  - dumpcap crashes when capturing from pipe to a pcap-ng file
    (e.g., when passing data from CACE Pilot to Wireshark). (Bug
    5939)
  - Unable to rearrange columns in preferences on Windows. (Bug
    6077) (Note: this bug still affects the 64-bit package)
  - No error for UDP/IPv6 packet with zero checksum. (Bug 6232)
  - Wireshark installer doesn't add access_bpf in 10.5.8. (Bug
    6526)
  - Corrupted Diameter dictionary file that crashes Wireshark.
    (Bug 6664)
  - packetBB dissector bug: More than 1000000 items in the tree
    possible infinite loop. (Bug 6687)
  - ZEP dissector: Timestamp not always displayed correctly.
    Fractional seconds never displayed. (Bug 6703)
  - GOOSE Messages don't use the length field to perform the
    dissection. (Bug 6734)
  - Ethernet traces in K12 text format sometimes give bogus
    "malformed frame" errors and other problems. (Bug 6735)
  - max_ul_ext isn't printed/decoded to the packet details log in
    GTP protocol packet. (Bug 6761)
  - non-IPP packets to or from port 631 are dissected as IPP.
    (Bug 6765)
  - lua proto registration fails for uppercase proto /
    g_ascii_strdown problem. (Bug 6766)
  - no menu item Fle-&gt;Export-&gt;SSL Session Keys in GTK. (Bug 6813)
  - IAX2 dissector reads past end of packet for unknown IEs. (Bug
    6815)
  - TShark 1.6.5 immediately crashes on SSL decryption (every
    time). (Bug 6817)
  - USB: unknown GET DESCRIPTOR response triggers assert failure.
    (Bug 6826)
  - IEEE1588 PTPv2 over IPv6. (Bug 6836)
  - Patch to fix DTLS decryption. (Bug 6847)
  - Expression... dialog crash. (Bug 6891)
  - display filter "gtp.msisdn" not working. (Bug 6947)
  - Multiprotocol Label Switching Echo - Return Code: Reserved(5)
    (Bug 6951)
  - ISAKMP : VendorID CheckPoint : Malformed Packet. (Bug 6972)
  - Adding a Custom HTTP Header Field with a trailing colon
    causes wireshark to immediately crash (and crash upon
    restart). (Bug 6982)
  - Radiotap dissector lists a bogus "DBM TX Attenuation" bit.
    (Bug 7000)
  - MySQL dissector assertion. (Ask 8649)
  - Radiotap header format data rate alignment issues. (Ask 8649)</changelog>
<changelog author="reddwarf@opensuse.org" date="1334404800">- Update to version 1.6.7:
  + Bugs fixed:
  - Malformed Packets H263-1996 (RFC2190). (Bug 6996)
  - Wireshark could crash while trying to open an rpcap: URL.
    (Bug 6922)
  + Updated H.263 Protocol Support</changelog>
<changelog author="andreas.stieger@gmx.de" date="1337688000">- adjust wireshark-corosync-packet-dissector.patch for source changes
- update to upstream 1.6.8
  + security fixes
  * wnpa-sec-2012-08 / CVE-2012-2392
    Infinite and large loops in the ANSI MAP, ASF, BACapp,
    Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 dissectors
    have been fixed. Discovered by Laurent Butti. (Bugs 6805,
    7118, 7119, 7120, 7121, 7122, 7124, 7125)
  * wnpa-sec-2012-09 / CVE-2012-2393
    The DIAMETER dissector could try to allocate memory improperly
    and crash. (Bug 7138)
  * wnpa-sec-2012-10 / CVE-2012-2394
    Wireshark could crash on SPARC processors due to misaligned
    memory. Discovered by Klaus Heckelmann. (Bug 7221)
  + bug fixes
  * User-Password - PAP decoding passwords longer than 16 bytes.
    (Bug 6779)
  * The MSISDN is not seen correctly in GTP packet. (Bug 7042)
  * Wireshark doesn't calculate the right IPv4 destination using
    source routing options when bad options precede them. (Bug
    7043)
  * BOOTP dissector issue with DHCP option 82 - suboption 9. (Bug
    7047)
  * MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW
    packets. (Bug 7089)
  * ANSI MAP infinite loop. (Bug 7119)
  * HCIEVT infinite loop. (Bug 7122)
  * Wireshark doesn't decode NFSv4.1 operations. (Bug 7127)
  * LTP infinite loop. (Bug 7124)
  * Wrong values in DNS CERT RR. (Bug 7130)
  * Megaco parser problem with LF in header. (Bug 7198)
  * OPC UA bytestring node id decoding is wrong. (Bug 7226)
  + Updated Protocol Support
    ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP,
    IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA,
    RADIUS
  + New and Updated Capture File Support
    5View, CSIDS, pcap, pcap-ng</changelog>
<changelog author="opensuse@sukimashita.com" date="1338724800">- Add all known headers to devel package in order to make it
  actually useable and allow building dissectors externally</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340366400">- update to upstream 1.8.0:
  * supports capturing from multiple interfaces at once.
  * add, edit, and save packet and capture file annotations.
  * pcap-ng file format is default
  * Decryption key management for IEEE 802.11, IPsec, and ISAKMP
    is easier.
  * GeoIP IPv6 databases are now supported.
  * large number of protocol dissectors added and updated
  * support for many capture file formats added and updated
  For a full list refer to the release notes:
  https://www.wireshark.org/docs/relnotes/wireshark-1.8.0.html
- drop wireshark-corosync-packet-dissector.patch, no longer compiles
  even after updating
- drop wireshark-1.6.5-netlogon-aes.patch, applied upstream
- drop idl2wrs command from -devel package
- update header files in include.filelist
- refresh wireshark-1.2.0-disable-warning-dialog.patch
- refresh wireshark-1.2.0-geoip.patch
- add wireshark-1.8.0-gmodule.patch to fix linking in factory</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343131200">- update to upstream 1.8.1 (bnc#772738)
  + vulnerabilities fixed:
  * The PPP dissector could crash
    (wnpa-sec-2012-11 CVE-2012-4048)
  * The NFS dissector could use excessive amounts of CPU
    (wnpa-sec-2012-12 CVE-2012-4049)
  + bug fixes:
  * Wireshark crashes on bootp filter
  * Wireshark &gt; 1.4 does not correctly read Association ID for PS
    Poll packets
  * Radius-EAP broken since 1.8.0 release
  * SNMP incorrectly marks SNMPv3 "discovery" packet as malformed
  * Widgets are not properly expanded in GTK3
  * Find Next Mark duplicated on Edit Menu
  * DVB-CI/CI+: fix offset error in operator_info apdu
  * Unable to correctly identify IEC 61850 MMS packets
  * WinPcap doesn't install if vcredist_x64 requires reboot
- remove wireshark-1.8.0-gmodule.patch, fixed upstream</changelog>
<changelog author="andreas.stieger@gmx.de" date="1345032000">- update to upstream 1.8.2 (bnc#776083)
  + vulnerabilities fixed:
  * The DCP ETSI dissector could trigger a zero division.
    (wnpa-sec-2012-13 CVE-2012-4285)
  * The MongoDB dissector could go into a large loop.
    (wnpa-sec-2012-14 CVE-2012-4287)
  * The XTP dissector could go into an infinite loop.
    (wnpa-sec-2012-15 CVE-2012-4288)
  * The ERF dissector could overflow a buffer.
    (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295)
  * The AFP dissector could go into a large loop.
    (wnpa-sec-2012-17 CVE-2012-4289)
  * The RTPS2 dissector could overflow a buffer.
    (wnpa-sec-2012-18 CVE-2012-4296)
  * The GSM RLC MAC dissector could overflow a buffer.
    (wnpa-sec-2012-19 CVE-2012-4297)
  * The CIP dissector could exhaust system memory.
    (wnpa-sec-2012-20 CVE-2012-4291)
  * The STUN dissector could crash.
    (wnpa-sec-2012-21 CVE-2012-4292)
  * The EtherCAT Mailbox dissector could abort.
    (wnpa-sec-2012-22 CVE-2012-4293)
  * The CTDB dissector could go into a large loop.
    (wnpa-sec-2012-23 CVE-2012-4290)
  * The pcap-ng file parser could trigger a zero division.
    (wnpa-sec-2012-24 CVE-2012-4286)
  * The Ixia IxVeriWave file parser could overflow a buffer.
    (wnpa-sec-2012-25 CVE-2012-4298)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.html
- adjust wireshark-1.2.0-disable-warning-dialog.patch for moved lines</changelog>
<changelog author="cfarrell@suse.com" date="1346414400">- license update: GPL-2.0+ and GPL-3.0+
  According to the COPYING file the PIDL utility (standalone tool) is
  GPL-3.0+ licensed</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to upstream 1.8.3 (bnc#783275)
  + vulnerabilities fixed:
  * The HSRP dissector could go into an infinite loop.
    (wnpa-sec-2012-26 CVE-2012-5237)
  * The PPP dissector could abort.
    (wnpa-sec-2012-27 CVE-2012-5238)
  * Martin Wilck discovered an infinite loop in the DRDA dissector.
    (wnpa-sec-2012-28 CVE-2012-5239 CVE-2012-3548 bnc#778000)
  * Laurent Butti discovered a buffer overflow in the LDP dissector.
    (wnpa-sec-2012-29 CVE-2012-5240)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.3.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1352894400">- for openSUSE 12.2 and later, build against lua51-devel instead
  of lua-devel for Lua support (bnc#780669)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354190400">- update to 1.8.4 [bnc#792005]
  + vulnerabilities fixed:
  * Wireshark could leak potentially sensitive host name
    resolution information when working with multiple pcap-ng
    files.
    wnpa-sec-2012-30 CVE-2012-5592
  * The USB dissector could go into an infinite loop.
    wnpa-sec-2012-31 CVE-2012-5593
  * The sFlow dissector could go into an infinite loop.
    wnpa-sec-2012-32 CVE-2012-5594
  * The SCTP dissector could go into an infinite loop.
    wnpa-sec-2012-33 CVE-2012-5595
  * The EIGRP dissector could go into an infinite loop.
    wnpa-sec-2012-34 CVE-2012-5596
  * The ISAKMP dissector could crash.
    wnpa-sec-2012-35 CVE-2012-5597
  * The iSCSI dissector could go into an infinite loop.
    wnpa-sec-2012-36 CVE-2012-5598
  * The WTP dissector could go into an infinite loop.
    wnpa-sec-2012-37 CVE-2012-5599
  * The RTCP dissector could go into an infinite loop.
    wnpa-sec-2012-38 CVE-2012-5600
  * The 3GPP2 A11 dissector could go into an infinite loop.
    wnpa-sec-2012-39 CVE-2012-5601
  * The ICMPv6 dissector could go into an infinite loop.
    wnpa-sec-2012-40 CVE-2012-5602
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add wireshark-suidflags.patch: Allow to pass SUID_{C,LD}FLAGS to
  introduce -fPIE -pie as needed for suid binaries
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.
- Export SUID_{C,LD}FLAGS with appropriate flags.</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- build with gtk3 on 11.4+
- disable zlib makes a sense for 1.2.5 only
- turn some features on (python, gcrypt, gnutls, plugins dir)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1359633600">- update to 1.8.5 [bnc#801131]
  + vulnerabilities fixed:
  * Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI
    DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS,
    SDP, and SIP dissectors
    wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574
    CVE-2013-1575 CVE-2013-1576 CVE-2013-1577 CVE-2013-1578
    CVE-2013-1579 CVE-2013-1580 CVE-2013-1581
  * The CLNP dissector could crash
    wnpa-sec-2013-02 CVE-2013-1582
  * The DTN dissector could crash
    wnpa-sec-2013-03 CVE-2013-1583 CVE-2013-1584
  * The MS-MMC dissector (and possibly others) could crash
    wnpa-sec-2013-04 CVE-2013-1585
  * The DTLS dissector could crash
    wnpa-sec-2013-05 CVE-2013-1586
  * The ROHC dissector could crash
    wnpa-sec-2013-06 CVE-2013-1587
  * The DCP-ETSI dissector could corrupt memory
    wnpa-sec-2013-07 CVE-2013-1588
  * The Wireshark dissection engine could crash
    wnpa-sec-2013-08 CVE-2013-1589
  * The NTLMSSP dissector could overflow a buffer
    wnpa-sec-2013-09 CVE-2013-1590
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1362657600">- update to 1.8.6 [bnc#807942]
  + vulnerabilities fixed:
  * The TCP dissector could crash.
    wnpa-sec-2013-10 CVE-2013-2475
  * The HART/IP dissectory could go into an infinite loop.
    wnpa-sec-2013-11 CVE-2013-2476
  * The CSN.1 dissector could crash.
    wnpa-sec-2013-12 CVE-2013-2477
  * The MS-MMS dissector could crash.
    wnpa-sec-2013-13 CVE-2013-2478
  * The MPLS Echo dissector could go into an infinite loop.
    wnpa-sec-2013-14 CVE-2013-2479
  * The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15 CVE-2013-2480
  * The Mount dissector could crash.
    wnpa-sec-2013-16 CVE-2013-2481
  * The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17 CVE-2013-2482
  * The ACN dissector could attempt to divide by zero.
    wnpa-sec-2013-18 CVE-2013-2483
  * The CIMD dissector could crash.
    wnpa-sec-2013-19 CVE-2013-2484
  * The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20 CVE-2013-2485
  * The RELOAD dissector could go into an infinite loop.
    wnpa-sec-2013-21 CVE-2013-2486 CVE-2013-2487
  * The DTLS dissector could crash.
    wnpa-sec-2013-22 CVE-2013-2488
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html</changelog>

</package>
<package pkgid="e67fe1656fb9929a917a6b3562d5aca6433433f79b2473e718c1a029d7961bae" name="libopenal0" arch="i586">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="23fe69046b6deec3f87eff6b3f333d56c215d27c20bc12d413f0a77d03551764" name="libopenal1" arch="i586">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="7e288c24ecb50e5f3a95f8e8886c83d7813f7601c57d3038b03026ade68981ef" name="microcode_ctl" arch="i586">
    <version epoch="0" ver="1.17" rel="142.5.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1275134400">- merge both Fedora and Debian improvements, most notably:
  * microcode.dat is now considered firmware, and installed in /lib/firmware
  * package no longer includes an init script microcode is loaded
    using udev rules.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275307200">- udev rules must live in %{_sysconfdir} otherwise it wont work.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275307200">- udev rules back into /lib/udev ,as suggested by Kay</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1285070400">- Update Intel microcode to version 20100914, vendor
  does not provide information regarding what it fixes.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1292760000">- Update microcode to 20101123, Intel does not disclose
  what this fixes.</changelog>
<changelog author="trenn@novell.com" date="1295352000">- Revive microcode.ctl service as 2.6.37 does not throw cpu add
  uevents. This is a workaround for 11.4 and will get reverted
  as soon as we go for 2.6.38 where cpu driver autoloading patches
  are included.
- Service will be forced to be enabled on all Intel and all
  AMD new than fam 10h.
- Add AMD microcode patch and logic to get it loaded</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305028800">- microcode.init, do not load microcode on Virtual Machines
  ugly error messages shown in syslog otherwise.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306065600">- Open all FD with O_CLOEXEC</changelog>
<changelog author="aj@suse.de" date="1309089600">- Update microcode to 20110428, Intel does not disclose
  what this fixes.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1318334400">- Update microcode to 20110915, Intel does not disclose
  what this fixes.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1321963200">- Add a systemd.service in the meanwhile we sort out
  if this has to be automatically handled by the kernel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323777600">- Update to microcode 20111110
- First steps for autoloading, currently only working with systemd
  * add script that generates microcode in a form understanable
    by the kernel.
  * add microcode.conf to modules-load.d so the module is
    loaded at boot with systemd which in turn will load
    updated microcode automatically.
    The kernel will in the near future autoload the module when
    a supported CPU is detected (WIP)
  * Axe all init scripts and systemd service files. this has
    to be handled in udev/kernel. (WIP)</changelog>
<changelog author="jeffm@suse.com" date="1335268800">- Update AMD microcode to 2012-01-17.
  - Autoloading on fam15 and newer have a _famXX suffix, which is
    causing warnings during boot on new systems (bnc#758499).</changelog>
<changelog author="cfarrell@suse.com" date="1338897600">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format</changelog>
<changelog author="crrodriguez@opensuse.org" date="1339243200">- Microcode autoload available in recent kernels is not
  very useful without this package, use proper Supplements
  to ensure it gets installed in the supported machines</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340193600">- Update to microcode 20120606, as usual, there is no information
  about the problems that has been fixed.</changelog>
<changelog author="trenn@suse.de" date="1349179200">- Update to Intel microcode 20120606-v2.
  An fixed version of the previous released one.</changelog>
<changelog author="trenn@suse.de" date="1350561600">- Update to latest AMD microcode version: 2012-01-17</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351252800">- Drop systemd units that loaded the microcode module
  it is loaded automatically nowdays.
- reload the microcode on pacakge update.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- bnc#809348
- Update microcode to version 20130222
- No changelog available.</changelog>

</package>
<package pkgid="ea492e9bfcaa28a0980529593bf0e40bca0b23d8b460a338d97d87f3b7d2ad1e" name="openal-soft" arch="i586">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="8c82d95d85c9ac1b7bff634a29572786902a4c1a47c230c76cff6d641f8e8d15" name="openal-soft-devel" arch="i586">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="36ffea2e47e9a42b6c4bbd4aa1540d2bad9cb4ee803f16e357b848c6294eaf6d" name="stellarium" arch="i586">
    <version epoch="0" ver="0.12.0" rel="2.4.1"/>

<changelog author="lars@linux-schulserver.de" date="1236600000">- update to 0.10.2:
  + Based on Qt 4.5.
  + Display constellations lines using nicely distorted arcs.
  + Fixed GUI problems when creating a new location.
  + Fixed the grid lines wrap around at the discontinuities in
    cylindrical and Mercator projection.
  + Hide the planet computation problems after year 80608.
  + Use the Qt raster engine by default. This fixes mac rendering
    bugs and speeds up greatly the GUI rendering.
  + Improved management of intersection of viewports with large FOV
    and projections with singularities.
  + Added Hammer-Aitoff projection allowing full sky overview.
  + Fixed various bugs.</changelog>
<changelog author="lars@linux-schulserver.de" date="1236772800">- updated documentation (pdf)
- added entry in susehelp center for documentation</changelog>
<changelog author="cyberorg@opensuse.org" date="1277726400">- Update to 0.10.5:
  sky
  * default catalogue of over 600,000 stars
  * extra catalogues with more than 210 million stars
  * asterisms and illustrations of the constellations
  * constellations for twelve different cultures
  * images of nebulae (full Messier catalogue)
  * realistic Milky Way
  * very realistic atmosphere, sunrise and sunset
  * the planets and their satellites
  interface
  * a powerful zoom
  * time control
  * multilingual interface
  * fisheye projection for planetarium domes
  * spheric mirror projection for your own low-cost dome
  * all new graphical interface and extensive keyboard control
  * telescope control
  visualisation
  * equatorial and azimuthal grids
  * star twinkling
  * shooting stars
  * eclipse simulation
  * skinnable landscapes, now with spheric panorama projection
  customisability
  * plugin system adding artifical satellites, ocular simulation, telescrope configuration and more
  * add your own deep sky objects, landscapes, constellation images, scripts...</changelog>
<changelog author="reddwarf@opensuse.org" date="1285502400">- Run spec-cleaner
- Remove support for pre-11.1 openSUSE versions
- Remove multiple unneeded BuildRequires
- Compile with latest gcc instead of 4.3
- Fixed Group and License tags
- Remove missuse of -fPIC with -no_fpic patch
- Remove unneeded SUSE_ASNEEDED=0 and %suse_update_config
- Run make with VERBOSE=1 to help rpmlint
- Use upstream's menu icon and install it under hicolor theme
- Enable sound support
- Fix Phonon use with -phonon patch</changelog>
<changelog author="reddwarf@opensuse.org" date="1291636800">- update to 0.10.6
  + New feature for installing landscapes from ZIP archives.
  + New plugin: Solar System editor.
  + New plugin: Time Zone manual override.
  + Oculars plugin: customizable keyboard shortcuts.
  + Satellites plugin: added new orbit prediction engine w/ orbits.
  + Satellites plugin: can now update TLEs from a local file.
  + Telescope control plugin: added manual equinox/epoch override.
- removed -no_fpic, -cmake and -phonon patches</changelog>
<changelog author="draht@suse.de" date="1315656000">- update to 0.11.0
  + New feature: atmosphere refraction support.
  + New plugin: Historical supernova.
  + New translatable strings: landscapes.
  + New moons of solar system planets
  + New feature: using different symbols for nebula icons.
  + TimeZone plug-in: fixed a bug preventing the saving of custom
    time zones.
  + Ocular plug-in: Corrected the calculation of CCD FOV.
  + Ocular plug-in: Implemented rotating the CCD bounding box.
  + Ocular plug-in: Made Telrad &amp; CCD mutually exclusive.
  + Ocular plug-in: Implemented better binoculars support
  + Ocular plug-in: Redesign dialog.
  + SVMT plug-in: Adding QtWebKit dependency.
  + Satellite plug-in: improve of code.
  + Solar System Editor plug-in: fixed MPES online search and updated hard-coded URLs
  + Skycultures: two new skyculture descriptions in Norwegian (Bokmål).
  + Redesign search tool
  + Improved texture manager.</changelog>
<changelog author="lars@linux-schulserver.de" date="1321185600">- update to 0.11.1:
  + new skyculture: Arabic
  + new moons and rings (LP: #815484, #834336)
  + new translations for landscapes and sky cultures (LP: #849292)
  + possibility to observate geo-orbiting satellites (LP: #837274)
  + new cities (LP: #856343, #860206)
  Fixes:
  + misspelling on a star name (LP: #884795)
  + location window: map pointer position is updated on
    longitude/latitude change.
  + location window: fixed checking "Use as default" changing the
    name of the selected location to "New Location" (LP: #881613)
  + Solar System Editor plug-in: a bug in the parsing of MPC lists:
    the epoch's Julian Day value was wrong by 0.5 JD (LP: #836839)
  + Solar System Editor plug-in: crash while trying to browse for
    a local file (LP: #837396)
  + Historical Supernovae plug-in: a bug in plug-in name (LP: #803157)
  + Historical Supernovae plug-in: a bug in selected instead
    of nearby stars (LP: #835815)
  + doesn't load localised description of skyculture/landscape if
    applanguage=system_default (LP: #845924)
  + add/remove landscapes dialog bug in OSX 10.6.8 (LP: #812008)
  + horizon line setting not saved (LP: #811945)
  + orbital period totally wrong for Himalia (LP: #806174)
  + flag_show_fps = false &amp; flag_show_fov = flase (LP: #728294)
  + 0.11.0 will crash if a landscape is selected with misspelled
    planet name (LP: #835422)
  + crash on selecting off-Earth location in the Location
    window (LP: #834886)
  + 0.11.0 crashes when switching language while location window
    is open (LP: #824936)
  + 0.11.0 crashes when trying using custom distortion file
    (LP: #871313)</changelog>
<changelog author="badshah400@gmail.com" date="1338897600">- Update to version 0.11.3:
  + Added:
  - ecliptic grid (LP: #834307)
  - world observatories to the locations list (LP: #891643)
  - allow configuration of url for SIMBAD lookups (LP: #948528)
  - opportunity to freely choose the object information to
    display (LP: #834325)
  - Pluto texture (LP: #906766)
  + Many bugs fixed; see installed file
    /usr/share/doc/packages/stellarium/ChangeLog for a complete
    list.
- Changes from version 0.11.2:
  + Too many to list; see installed file
    /usr/share/doc/packages/stellarium/ChangeLog for a complete
    list.
- Cleanup spec file:
  + Correct License tag in keeping with spdx.org norms
  + Also package ChangeLog file in docdir
- Add Type=Application in stellarium_user_guide.desktop to prevent
  rpmlint warnings
- Install icons of various sizes in the hicolor icon directory;
  depends on ImageMagick
- Use BuildRequires: hicolor-icon-theme so that there is no need
  to separately own the hicolor icon theme directories; also use
  post install scripts to update the hicolor icon theme index.</changelog>
<changelog author="badshah400@gmail.com" date="1339416000">- Remove unnecessary file that creates a licensing problem from
  source (bnc#766373).</changelog>
<changelog author="idonmez@suse.com" date="1347969600">- Add explicit glu dependency</changelog>
<changelog author="badshah400@gmail.com" date="1349784000">- Update to version 0.11.4:
  + New features:
  - New plugin: Exoplanets
  - New plugin: Observability analysis
  - Get geometric altitude and azimuth for script engine (LP:
    [#1010617])
  - Sky image loading with altitude/azimuth coordinates (LP:
    [#1023548])
  - New hotkey for star name labels (LP: #1032989)
  - Option to activate/deactivate the Nebula Background Images
    button via GUI (LP: #925247)
  - Return to user set location and landscape (LP: #981507)
  - Display degrees and minutes for FOV of CCD (LP: #998761)
  - Adding all possible satellites (LP: #1006495)
  - Building a Windows x64 packages (LP: #1003041, #1027607)
  - Apply atmosphere effect only on bodies with atmosphere (LP:
    [#971875])
  + Fixed:
  - Various Stellarium freezes and crashes (LP: #1005155,
    [#1030913], #940638, #992267, #1033380, #951967, #1040054)
  - Various plugins issues (LP: #751381, #892027, #1006134,
    [#1040066], #1040085)
  - Various issues for nebulae (LP: #1026021, #744517)
  - Add/subtract one sidereal year jumps wrong amount (LP:
    [#1006208])
  - Various small issues, typos and mistakes (LP: #1022506,
    [#1032469], #1019247, #985204)
  - Various issues in Scripting Engine (LP: #1023934, #1017148,
    [#1017154], #730180)
  + Changed:
  - New tab in the configuration window to control the selected
    object information
  - Improvement Night Vision mode
  - Extend list of default scripts.</changelog>
<changelog author="badshah400@gmail.com" date="1359633600">- Update to version 0.12.0 (bnc#801946):
  + New features:
  - New rendering engine (LP: #673183)
  - Editable keybindings (LP: #1098851, #1035635, #832256,
    [#789002])
  - Scripting for plugins (LP: #1040242)
  - Some transneptunian objects (LP: #899084, #1051205)
  - New geographical locations (LP: #1051803)
  - New textures for DSO
  - DeltaT and lunar acceleration computation (LP: #575621)
  + Improvements:
  - Improving the scripting engine (LP: #1059368)
  - Improving the plugins (LP: #1082167, #1042714)
  - Improving the coordinate grids (LP: #1036294)
  - Improving the constellation boundaries (LP: #1039072)
  - Improving the search tool
  + Bug fixes:
  - Clang Wself-assign warning during build process on some
    platforms (LP: #1097358)
  - Bugs in Observability plugin (LP: #1042059, #1054599,
    [#1053058])
  - Bugs in TUI plugin (LP: #1083380)
  - Bugs in Satellites plugin (LP: #1048220)
  - Bugs in Compass plugin (LP: #695891)
  - Bugs in scripting engine (LP: #1046518, #1092781)
  - Font corruption bugs (LP: #597633, #778747, #819278,
    [#903310])
  - Screen flashing in fullscreen mode (LP: #716695, #824788)
  - Lost nebula images (LP: #1042393, #1051038)
  - Bugs in Night Vision mode (LP: #578367)
  - Bugs in GUI and Core (LP: #1090722, #1082510, #1071455,
    [#1071458], #1056868, #1054600, #1045111, #1040944, #1077545)
  - Crashes (LP: #1043640, #1044654, #1045783)
- Drop outdated user guide from package, and corresponding
  .desktop file (the user guide is now on the wiki
  http://www.stellarium.org/wiki/index.php/Stellarium_User_Guide)
- Drop build dependency on ImageMagick, as the install script now
  automatically installs prepackaged icons in the hicolor
  directory
- Require qt &gt;= 4.8 and cmake &gt;= 2.8.7 for building.</changelog>

</package>
<package pkgid="3a8a7681950247d8aaa31a04f6cb3857b28679c182bd34ab41878f0528ce4097" name="apcupsd" arch="i586">
    <version epoch="0" ver="3.14.10" rel="3.4.5"/>

<changelog author="seife@opensuse.org" date="1266235200">- fix build with newer net-snmp by undefining MIB</changelog>
<changelog author="seife@opensuse.org" date="1266235200">- add missing hal directories to pass rpmlint checks</changelog>
<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905600">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905600">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>

</package>
<package pkgid="7ac37dc7cadd295249f6df37ff5bf066ff6b333b9cd5eb4bf98667d7d1be328a" name="apcupsd-cgi" arch="i586">
    <version epoch="0" ver="3.14.10" rel="3.4.5"/>

<changelog author="seife@opensuse.org" date="1266235200">- fix build with newer net-snmp by undefining MIB</changelog>
<changelog author="seife@opensuse.org" date="1266235200">- add missing hal directories to pass rpmlint checks</changelog>
<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905600">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905600">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>

</package>
<package pkgid="0c1de4ba84de0a0e706c18b4d156f46083d87ac2691f9bf1881f382a8dd5120c" name="apcupsd-gui" arch="i586">
    <version epoch="0" ver="3.14.10" rel="3.4.5"/>

<changelog author="seife@opensuse.org" date="1266235200">- fix build with newer net-snmp by undefining MIB</changelog>
<changelog author="seife@opensuse.org" date="1266235200">- add missing hal directories to pass rpmlint checks</changelog>
<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905600">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905600">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>

</package>
<package pkgid="2850c2f908d7265cf1faa4c5f89f99b3b1db6e4a3648b127313510612685cce9" name="java-1_7_0-openjdk" arch="i586">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="992ff723d2e5c6ba3c1f055c73556b267ad5e39dae27b9cb098f0bb3918ea85f" name="java-1_7_0-openjdk-demo" arch="i586">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="91ea432a8ba4b673d5fcc04ddcf57067fa16d930a348a3c4aeb6344c89b3da08" name="java-1_7_0-openjdk-devel" arch="i586">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="0e908bed4f795e49839cec1d29ad7351daa5a32caad862e63966cdc0076215ee" name="java-1_7_0-openjdk-javadoc" arch="i586">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="fd198eb8b99d680a044ad3306bef03b5f168ab0c7146d99ad328575ff94ddf59" name="java-1_7_0-openjdk-src" arch="i586">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="d6ef4c2fb4d312ec291647056d9373846f7b588b2863cf429f23ec88d3ac347f" name="finch" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="a29f0b2ed570c3c716caee8e2410c03cdda1c5461d73bef50ff8818af93a859f" name="finch-devel" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="6c5995e5079782121ba0e9c01b46a62a4f69438354ec95d7be7c1d346a847433" name="libpurple" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="259efc02400ab55d5c5863f625a54f86576ef843087dbc0085554e4c725d69fa" name="libpurple-devel" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="b62201f7e35a3cbf304ef821e030739d0c94bb41302919f6135628e2ee899386" name="libpurple-meanwhile" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="51bc5148806ca4ffa075e585bdb5964b388c7865a20f08f2a8025d6420be8df8" name="libpurple-tcl" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="507eb53fdd91a38e30ad077ef7896f8293298863cb42609fd0d99c066b7754da" name="pidgin" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="1741fedf531d734711621e2a0124ad7be94cee28af29283fa30f3f2bebcdb4fd" name="pidgin-devel" arch="i586">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="b4a847e569896039c49eaf2815150a580acf6e8f869ab89f0864042b98fef7e1" name="freeradius-server" arch="i586">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="105d9c12916223b84f6eeb71ca87414704305ca6ad01925c8e68bcea33484f2e" name="freeradius-server-devel" arch="i586">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="5d5c8b3eb6f2a263b574d4a55403c05f9ed52c6ba531bd3814add15f9539aed6" name="freeradius-server-dialupadmin" arch="i586">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="8846fcb5d2f89788bca44187342f174581c562ec3bd8c4a58ab4085c0cc64579" name="freeradius-server-doc" arch="i586">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="47f814d193aee85deea4664c1b02b68c691bbf242ded76511edadfa1773083d0" name="freeradius-server-libs" arch="i586">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="39bb53e208acbde552c8460be53c081597ba071f85a2d1c252544bf2a3817c82" name="freeradius-server-utils" arch="i586">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="ba0c1113a88af108fa23f226d984d2ed28908e6bd08b73cc79ab1a4f29a3b84a" name="nss_ldap" arch="i586">
    <version epoch="0" ver="265" rel="19.5.1"/>

<changelog author="rhafer@novell.com" date="1242734400">- updated to nss_ldap-264. From the changelog:
  * fix for PADL-Bug#378: MAP_H_ERRNO() should map NSS_TRYAGAIN
    to NETDB_INTERNAL not TRY_AGAIN
  * fix for PADL-Bug#379: ldaps:// URIs only work if "ssl on"
    is set
  * fix for PADL-Bug#248: nss_ldap exposes malformed entries to the
    system
  * fix for PADL-Bug#374: nss_ldap returns success from setnetgrent()
    when the requested netgroup doesn't exist
  * fix for PADL-Bug#376: getXXent() only returns NULL once before
    implicitly calling setXXent(), whereas other backends continue
    to return NULL</changelog>
<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="rhafer@novell.com" date="1260878400">- Update to nss_ldap-265. From the changelog:
  * fix for PADL-Bug#132: add versioning information to binary
  * fix for PADL-Bug#403: add AM_MAINTAINER_MODE
  * fix for PADL-Bug#388: bad LDAP query for ether lookups
  * fix for PADL-Bug#391: clarify bind timelimit defaults
    in ldap.conf
  * fix for PADL-Bug#392: call do_close() if ldap_result()
    or ldap_parse_result() fails (before returning
    NSS_UNAVAIL)
  * fix for PADL-Bug#409: deallocate context in
    _nss_ldap_ent_context_release() to avoid bad usage
  * fix for PADL-Bug#410: don't leak file descriptors in
    _nss_ldap_readconfig</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
<changelog author="rhafer@suse.de" date="1295265600">- A memory leak in nss_ldap could lead to processes (e.g. nscd)
  growing extremely large (bnc#659100, PADL-Bug#418)
- nss_ldap didn't try to reconnect properly when the LDAP
  connection was lost between two getXXent() calls
  (bnc#662752, PADL-Bug#215)</changelog>
<changelog author="rhafer@suse.de" date="1319803200">- Entries with invalid (or too large) uidNumber/gidNumber attributes
  could crash nss_ldap (bnc#726393)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1350561600">- fix build with possix correctly set (added to nss_ldap.dif)</changelog>
<changelog author="tchvatal@suse.com" date="1359374400">- Fix segfault when using with glibc-2.16 and linking with pthread.
  * adds patches:
    nss_ldap-265-glibc-2.16.patch (PADL-Bug#445)
    nss_ldap-265-pthread.patch (PADL-Bug#446)</changelog>
<changelog author="rhafer@suse.com" date="1363348800">- ldap.conf is now part of nss_ldap since pwdutils was dropped
  (bnc#809245)
- removed no longer needed %post scriptlet</changelog>

</package>
<package pkgid="82f3c87c634bb1f7b9ccb1103b029497fd10d42458d8db3ff0a5b55e25b51c87" name="xtrabackup" arch="i586">
    <version epoch="0" ver="2.0.5" rel="2.4.1"/>

<changelog author="lenz@grimmer.com" date="1239278400">- Initial package added to the openSUSE Build Service (Version 0.5)
  Fri Mar 13 00:00:00 UTC 2009 - Vadim Tkachenko
- initial release</changelog>
<changelog author="lenz@grimmer.com" date="1241092800">- Update to version 0.6</changelog>
<changelog author="lenz@grimmer.com" date="1244548800">- Update to version 0.7</changelog>
<changelog author="andreas.stieger@gmx.de" date="1335355200">- add mysql-5.1.59.tar.gz
- add mysql-5.5.17.tar.gz
- add .changes file
- build with RPM_OPT_FLAGS
- update project URL
- add HTML documentation built from source
- update to upstream 2.0.0:
  * Percona XtraBackup can now save Galera replication information while
  performing a backup when given the --galera-info option to innobackupex.
  * XtraBackup now supports compressed backups. These backups can be done in a
  parallel way, thus utilizing multiple CPU cores if needed. In previous
  versions, compression was only possible with streaming backups + external
  (usually single-threaded) compression utilities, which also had a number of
  other limitations (e.g. could not be used with parallel file copying, it was
  required to uncompress the entire backup to restore a single table).
  * Percona XtraBackup now supports streaming incremental backups. In previous
  versions streaming backups were performed by the innobackupex script but
  incremental backups were done by the xtrabackup binary which calculated deltas
  by scanning data files. Which meant those two feature were mutually exclusive,
  i.e. one couldn’t do streaming incremental backups.
  * As part of the backup, the LRU dump is now included as well.
  * Support for compiling and running Percona XtraBackup against debug versions of
  InnoDB. This is only for very advancedusers.
- For fixes included in previous releases, see
  http://www.percona.com/doc/percona-xtrabackup/release-notes.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1338206400">- remove HTML documentation in favour of online documentation
  to fix factory build, also simplifies license.
- require cmake &gt;= 2.8.5 to catch this requirement in OBS earlier
  when building for SLE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1338292800">- cmake &gt;= 2.6.3 is the actual minimum requirement, fixes 11.4</changelog>
<changelog author="andreas.stieger@gmx.de" date="1341662400">- update to 2.0.1:
  * After creating a full compressed backup, performing a
    compressed/uncompressed incremental backup would fail because
    xtrabackup_checkpoints was compressed. This has been fixed by
    omitting xtrabackup_checkpoints from compression, so that a full
    backup could be used for incremental backups without decompression.
  * --copy-back was copying compressed *.qp files as well. This has been
    fixed by skipping the compressed files while copying the data back.
  * Streaming backups with --stream=tar would fail if the file size was
    bigger than 8GB. Fixed by changing the libarchive format from USTAR
    to restricted PAX which supports bigger file sizes.
  * innobackupex was  calling the tar utility unconditionally when
    streaming ib_lru_dump and xtrabackup_galera_info. Which led to a
    broken stream when the xbstream format was used.
  * when --compress was used together with --stream=tar, xtrabackup was
    silently creating a broken backup. Now it fails with an error
    instead, suggesting to either use xbstream, or don't use compression
    at all.
  * --safe-slave-backup was resulting in incorrect binlog info, because
    in some cases innobackupex confused the response from SHOW SLAVE
    STATUS with the one from SHOW MASTER STATUS.
  * xbstream would  sometimes fail while extracting the backup.
  * innodb_data_file_path was not written to backup-my.cnf, this was a
    regression introduced in previous version.
  * XtraBackup would fail to find the datadir when using mysqld_multi.
    This was fixed by adding new option --defaults-group, to both
    innobackupex and xtrabackup, now it can be specified which section
    of my.cnf to handle.
  * InnoDB tables with names containing: opt, par, CSV, MYD were backed
    up twice. These tables were backed up by xtrabackup binary and by
    innobackupex script. Regular expression for filtering database
    directory contents was fixed.
  * When run innobackupex with --apply-log, it was reading configuration
    from the server configuration file instead of backup-my.cnf in
    backup directory.
  * innobackupex could copy files to a wrong directory when merging an
    incremental backup to a full one.
  * Incremental backups were not working correctly with --stream=tar.
    This was fixed by making --incremental-lsn incompatible with
  - -stream=tar. XtraBackup will fail with an error message suggesting
    to use --stream=xbstream.
  * innobackupex failed to copy-back backup if destination dir wasn't
    empty. Exceptions were added for my.cnf and master.inf` as
    XtraBackup doesn't backup those files, so it won't overwrite
    anything.
  * innobackupex --copy-back could skip some files when copying from a
    Windows filesystem mounted over NFS.
  * XtraBackup binary was leaking file descriptors on --backup. This was
    fixed by reusing the existing file descriptor so no leak occurs.
  * There were no source files in tar.gz archive for Percona XtraBackup
    2.0.0.
  * XtraBackup|binary could fail with the log block checksum mismatch"
    error when reading an partially written log block.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343995200">- remove documentation from MySQL and xtrabackup tarballs due to license</changelog>
<changelog author="andreas.stieger@gmx.de" date="1344081600">- add xtrabackup-nodoc.sh to source package - removes documentation
  from pristine upstream source packages when maintaining package.
  Not used during build or in binary package.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1344945600">- update to 2.0.2
  * Fixed false positive test suite failures with grep 2.10
  * Incremental backup would fail if a tablespace was created
    between full and incremental backups.
  * Assertion error in creating a compressed tablespace at delta
    apply time has been fixed.
  * If the table was renamed after the full backup, but before the
    incremental backup has been taken, incremental backups would
    fail when being prepared.
  * When the variable innodb_log_block_size was set to 4096, backups
    would fail in the prepare stage.
  * Additional incremental backup tests have been added for the
    incremental backup data page copy.
- update percona-xtrabackup-2.0.2-nodoc.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to 2.0.3
- new features:
  * innobackupex now supports new --move-back option that can be used
    instead of --copy-back in case there isn’t enough free disk space
    on the server to copy files. As this option removes backup files,
    it must be used with caution.
- bug fixes:
  * Symlink for innobackupex-1.5.1 binary has been broken in the
    previous version of XtraBackup.
  * XtraBackup 2.0.2 was not backwards compatible which caused
    incremental backups created with previous versions to fail on
    prepare.
  * Fix a regression that may potentially lead to a 5x increase in
    disk space occupied by incremental backups.
  * Fix a regression which caused incorrect handling of compressed
    tablespaces with the page size of 16K, that were created between
    the last full or incremental and the next incremental backup.
- packaging changes:
  * improve upgrade from generic packages</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354708800">- update to 2.0.4
  + a regression introduced in XtraBackup 2.0.2 caused incremental
    backups to fail because the init parameter values were not
    normalized to the values used inside InnoDB
  + a regression introduced in traBackup 2.0.2 didn’t take the
    separate doublewrite tablespace into an account
  + XtraBackup was handling the separate doublewrite buffer file
    incorrectly. File path of the doublewrite buffer wasn’t added
    to the backup-my.cnf and after the restore old doublewrite buffer
    file was used instead of one made during the prepare stage
  + XtraBackup now accepts the --innodb=force option, previously it
    would throw an error if the option was set
  + Option safe-slave-backup wasn’t working correctly
  + In case safe-slave-backup-timeout was reached when using the
    safe-slave-backup option, SQL_THREAD was left in stopped state
    causing the slave thread to lag behind. This was fixed by
    checking the initial SQL_THREAD state and starting it before
    terminating with a timeout error and starting the SQL_THREAD
    only if it was running initially.
  + In case of streaming backups, innobackupex would resume the
    Xtrabackup process and then wait for it to finish before running
    UNLOCK TABLES. This caused database to be unnecessarily locked
    with FLUSH TABLES WITH READ LOCK. Innobackupex now waits only
    till log copying is finished to unlock the databases
  + XtraBackup would fail on --apply-log when filesystem didn’t
    support Linux AIO
  + XtraBackup binary would ignore innodb_use_native_aio when it’s
    specified either in my.cnf or as a command line option
  + XtraBackup would print a warning message during the prepare
    stage about innodb_file_io_threads being deprecated, even if the
    variable wasn’t set
  + XtraBackup Galera tests can now be run concurrently</changelog>
<changelog author="andreas.stieger@gmx.de" date="1363262400">- update to 2.0.5
- new features:
  + New option --defaults-extra-file to read options before the
    standard defaults-file, e.g. for separate username/passwords
    crontab or a script somewhere in the system.
- bugs fixed:
  + In case of streaming backups, innobackupex would resume the
    XtraBackup process and then wait for it to finish before
    running UNLOCK TABLES. This caused database to be unnecessarily
    locked with FLUSH TABLES WITH READ LOCK. Innobackupex now waits
    only till log copying is finished to unlock the databases.
  + innobackupex error messages referencing the data directory
    have been extended to show the path of the data directory
    mentioned in the error message.
  + Partitioned tables were not correctly handled by the
  - -databases, --include, --tables-file options of innobackupex,
    and by the --tables and --tables-file options of XtraBackup.
  + When built-in compression was used, XtraBackup was doing
    unbuffered writes to the destination file or stream in very
    small chunks which in return caused inefficient I/O.
  + Unnecessary long sleep() in innobackupex lead to FLUSH TABLES
    WITH READ LOCK taking too long.
  + If innobackupex would crash it would leave the xtrabackup_suspended
    file on the filesystem. This could then cause innobackupex to think
    XtraBackup has suspended itself the moment it started, and then when
    XtraBackup actually does suspend itself, innobackupex would wait for
    it to end and wouldn’t re-remove the suspend file, leading to a wait
    deadlock.
  + innobackupex would fail to recognize MariaDB 5.2 and MariaDB 5.3
- fix path of MySQL 5.5 xtrabackup binary [bnc#809505]</changelog>

</package>
<package pkgid="6ad39a91877d6ee343d819c7b657fa19fdcb6acebd67dbc74520ae488a4c07ca" name="yum-metadata-parser" arch="i586">
    <version epoch="0" ver="1.1.2" rel="122.14.1"/>

<changelog author="cthiel@suse.de" date="1154779200">- added yum-metadata-parser-1.0-quiet.patch from Fedora</changelog>
<changelog author="cthiel@suse.de" date="1168257600">- update to version 1.0.3
  * sqlitecache.c: Never use the default glib log handler.  This way, when
  - d0 is passed, we won't output to the glib log handler (since nothing
    should be displayed at all).
  * sqlitecachec.py: support newer pysqlite as included in python 2.5
  * sqlitecache.c: Use structs and function pointers to reduce code
    duplication.
  * sqlitecache.c, sqlitecachec.py: Display repoid while populating the
    cache.</changelog>
<changelog author="cthiel@suse.de" date="1171627200">- remove Requires: yum</changelog>
<changelog author="cthiel@suse.de" date="1171627200">- Requires: python-sqlite</changelog>
<changelog author="cthiel@suse.de" date="1175860800">- update to version 1.0.4
  * db.c: Create a pkgKey index for provides, requires, conflicts, and
    obsoletes
  * db.c, db.h, package.h, sqlitecache.c, xml-parser.c: include Prereqs</changelog>
<changelog author="cthiel@suse.de" date="1178193600">- update to version 1.1.0
  * setup.py, yum-metadata-parser.spec: bump version to 1.1.0 b/c of the
    dbversion change
  * db.c, db.h, package.h, xml-parser.c: Bump database version to 10 build_*
    and time_* values are stored as ints, rather than text, and
    checksum_value has been dropped, as this is the same value as pkgId.
  * xml-parser.c: Reduce some code duplication in xml-parser</changelog>
<changelog author="cthiel@suse.de" date="1179748800">- update to version 1.1.1
  * Expose DBVERSION</changelog>
<changelog author="cthiel@suse.de" date="1188388800">- update to version 1.1.2
  * add some indexes to speed up a number of lookups in yum</changelog>
<changelog author="dmacvicar@suse.de" date="1360670400">- support &gt;2G rpms in the XML to sqlite conversion (upstream patch)
  (bnc#802576, rh#612409)</changelog>
<changelog author="bbrunner@suse.com" date="1363780800">- Fixed release-version</changelog>

</package>
<package pkgid="c743f0589afb3b9a4abeb917acbd2c705167dd2ee4f3032c6d648f35b9d3d86d" name="bindfs" arch="x86_64">
    <version epoch="0" ver="1.12" rel="2.4.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1268568000">- initial package (1.8.4)</changelog>
<changelog author="jengelh@medozas.de" date="1336219200">- Update to new upstream version 1.10.2
  * No changelog was provided
- Remove redundant sections/tags from specfile
- Enable parallel build</changelog>
<changelog author="jengelh@inai.de" date="1341403200">- Update to new upstream version 1.10.6
  * a memory bug from 1.10.1, and --create-as-user and thread
  safety regressions were resolved
  * honor CFLAGS in ./configure call
  * fix a short-allocation that led to a crash in bindfs_readdir
  * implement a lookup cache to speed up repeated lookups
  (helpful for networked user databases, e.g. on LDAP)</changelog>
<changelog author="jengelh@inai.de" date="1350388800">- Update to new upstream release 1.11
  * Be single-threaded by default due to an inherent race condition;
  use -o multithreaded to get the old behavior back.
  * Respect setgid bit on directories when using --create-as-user</changelog>
<changelog author="jengelh@inai.de" date="1362139200">- Update to new upstream release 1.12
  * Replace "-o user" and "-o group" with "-o force-user" and
  "-o force-group", because the former are standard mount options
  that mount(8) consumes and does not pass on to the helper.
  (bnc#806956)</changelog>

</package>
<package pkgid="650e0f86ddfa53797f54276b76d8954407a00a7998188751782a6a619805ef9b" name="cmis-client" arch="x86_64">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="ef0a805570b6f58686524ebcaebc644f1547d213d5c30d92f1dc03bb9159ffbd" name="gtkglext-devel" arch="x86_64">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="f46d1b0d7fa15268ee208ef22250a267511392f70cec45f967e51ebc14c967e5" name="gtkglext-doc" arch="x86_64">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="6a7b5d73dc37c4b8f9156f9efcad39f32c2ec14e54363becb9ac300d8a92859a" name="ibm-data-db2" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="c9744b1936299756d7507f49c373bea3a036db4afacffe04889c992aece46beb" name="kiwi" arch="x86_64">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="476441d9a4a111b260245013e60602088d0d084d0b502d053088a8e302ff171d" name="kiwi-desc-isoboot-requires" arch="x86_64">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="82c433d057229980bced86eebb67ea9186d7facc3be013e0f619da275c215ca4" name="kiwi-desc-netboot-requires" arch="x86_64">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="87e2acd8fb7502948f8231f006969859ca8432a6c484cf480eb69651bcc032c9" name="kiwi-desc-oemboot-requires" arch="x86_64">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="b1910b2c9b0c2c0a3216dea3e91c5ab308c4b59ab32c15dc63e5ee3e660e9505" name="kiwi-desc-vmxboot-requires" arch="x86_64">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="959ea030997fd14b79401cf754921c3ba89d5890e037e42463a5c136382a3a97" name="kiwi-tools" arch="x86_64">
    <version epoch="0" ver="5.04.59" rel="1.4.1"/>

<changelog author="ms@suse.de" date="1361361600">- v5.04.50 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.51 released</changelog>
<changelog author="ms@suse.de" date="1361448000">- fixed default systemd target setup, baseSetRunlevel
  function a systemd target is not a number but something
  like multi-user.target or graphical.target</changelog>
<changelog author="ms@suse.de" date="1361448000">- make sure the openSUSE 12.3 JeOS set the correct console
  based systemd target and fix some typos in config.sh too</changelog>
<changelog author="ms@suse.de" date="1361448000">- v5.04.52 released</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed creation of KIWICache object, was missing the xml pointer</changelog>
<changelog author="ms@suse.de" date="1361534400">- fixed cleanMount function to work if $root dir can't be
  created. It might happen that at that point kiwi already
  mounted some stuff which can be released via cleanMount
  but cleanMount returned if no $root location was created.</changelog>
<changelog author="ms@suse.de" date="1361534400">- v5.04.53 released</changelog>
<changelog author="ms@suse.de" date="1361793600">- added vmxFlavour-uefi and xenFlavour-uefi profiles to the
  suse-SLE11-JeOS template image description. Given that
  SLE11 SP3 is used these profiles can be used to build
  UEFI images based on grub2</changelog>
<changelog author="ms@suse.de" date="1361793600">- v5.04.54 released</changelog>
<changelog author="ms@suse.de" date="1361966400">- fixed UEFI bootloader setup for grub2 based disk images
  + fixed creation of image install CDs in EFI mode
  + call findAndCopyMagicBlock only if hybrid is requested</changelog>
<changelog author="ms@suse.de" date="1361966400">- v5.04.55 released</changelog>
<changelog author="ms@suse.de" date="1362052800">- fixed KIWILinuxRC::installBootLoaderGrub2()
  + install grub2 only in BIOS mode, in EFI mode this doesn't make sense
  + make sure the grub2 config file also lands on the EFI (fat) partition
  when in UEFI mode the precompiled and signed grub.efi image searches
  there for the configuration</changelog>
<changelog author="ms@suse.de" date="1362052800">- v5.04.56 released</changelog>
<changelog author="ms@suse.de" date="1362139200">- fixed grub2 setup for older distros which packages into lib/grub2-efi</changelog>
<changelog author="ms@suse.de" date="1362139200">- v5.04.57 released</changelog>
<changelog author="ms@suse.de" date="1362398400">- if secure boot is enabled it's required to tell that
  in /etc/default/grub to make grub2-mkconfig produce
  correct results</changelog>
<changelog author="ms@suse.de" date="1362398400">- v5.04.58 released</changelog>
<changelog author="ms@suse.de" date="1362657600">- fixed checks for already mounted system filesystems
- fixed race condition in bindDiskPartitions, kpartx returns
  early and sometimes before the devices in /dev/mapper were
  created</changelog>
<changelog author="ms@suse.de" date="1362657600">- v5.04.59 released</changelog>

</package>
<package pkgid="e1c6813ea29aa2f2c12331581555d72f0043ebc88521340d248b4a27ba368ea5" name="libcmis-0_3-3" arch="x86_64">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="82d22ed02887820a7e11725293571a103d366a29bbd9c23edbe04f2e3e9bae82" name="libcmis-c-0_3-3" arch="x86_64">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="ba8dc27026cbe6c4d81fe7bdc99358f4a1185fb5652829b07dfc3aecebc71d83" name="libcmis-c-devel" arch="x86_64">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="e088687dc64d7cf7bd4e704f519a96f9e8e9a0aa50c775416affa51f2b9902b0" name="libcmis-devel" arch="x86_64">
    <version epoch="0" ver="0.3.0" rel="2.5.1"/>

<changelog author="cbosdonnat@suse.com" date="1317729600">- Created initial package with libcmis 0.1.0</changelog>
<changelog author="cbosdonnat@suse.com" date="1338292800">- Fixed licenses</changelog>
<changelog author="cbosdonnat@suse.com" date="1338811200">- Update to version 0.2.1
  + 0.2.0
    + Handle all the authentication methods that can be handled by
    libcurl like Basic, NTLM...
    + Decode base64 encoded content sent by SharePoint
    + Set the content of a document
    + Query nodes by path
    + Get the allowable actions for a node
    + Object properties can be updated
    + Query object types
    + Creation of folders and documents
    + Deletion of folders and documents
  + 0.2.1
    + Fixed documentation distribution</changelog>
<changelog author="cbosdonnat@suse.com" date="1347537600">- Update to version 0.3.0
  + 0.2.2
    + Fixed soname for the library
    + Allow building against libcurl 7.13.1
  + 0.2.3
    + Fixed SharePoint support
    + Conditional build of man page
  + 0.3.0
    + Added Document::checkOut(), Document::cancelCheckout() and Document::checkIn()
    + Added Object::move( ) -- Grau Data
    + Fixes for xcmis and cloudoku.com -- Grau Data
    + Added Document::getAllVersions( )
    + WebService binding implementation
    + Session factory automatically detects which binding to use
    + C wrapper API
    + Unit tests are now split between quick ones and the ones needing a CMIS server</changelog>
<changelog author="tchvatal@suse.com" date="1359115200">- Fix libcmis-c-devel dependency over itself.</changelog>
<changelog author="tchvatal@suse.com" date="1361966400">- Add libcmis-0.3.0-proxy.patch which allows connection to cmis
  interfaces over proxy. This is must for LO-4.0.1+.</changelog>

</package>
<package pkgid="f82b9e1a917e18039325f00b1dbd79f68934bb1fae3c585c8701942a95f4f727" name="libgtkglext-x11-1_0-0" arch="x86_64">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="e4c63046c40aa46aaf86154f45cd995eb36a19ec6fcc1e78cfe3510704d4e6fa" name="libgtkglext-x11-1_0-0-32bit" arch="x86_64">
    <version epoch="0" ver="1.2.0git20110529" rel="2.1"/>

<changelog author="sbrabec@suse.cz" date="1170849600">- Do not build unusable static libraries (#238552).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215604800">- missing Mesa-devel dependency on -devel package causes
  python-gtkglext build faliure</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- Add baselibs.conf as a source</changelog>
<changelog author="dimstar@opensuse.org" date="1267704000">- Add gtkglext-gtk_widget_toplevel.patch to drop deprecated usage
  of GTK_WIDGET_TOPLEVEL, bnc#585137, bgo#611803, reported and
  patched by Guillermo Ballester Valor.
- Clean spec file.</changelog>
<changelog author="vuntz@opensuse.org" date="1278331200">- Add gtkglext-no-deprecated-flags.patch to not build gtkglext with
  the *_DISABLE_DEPRECATED flags. This makes the build more robust
  when some API is marked as deprecated. Unfortunately, without
  this, the gtkglext library is looking for unknown symbols that
  should actually be macros at build time. Fix bnc#617677.
- Drop gtkglext-gtk_widget_toplevel.patch: this is not needed
  anymore thanks to gtkglext-no-deprecated-flags.patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1286798400">- Update packaging to use the shared library packaging policy:
  + Create libgtkglext-x11-1_0-0 subpackage.
  + Add Provides/Obsoletes for gtkglext to libgtkglext-x11-1_0-0.
  + Update baselibs.conf accordingly.</changelog>
<changelog author="vuntz@opensuse.org" date="1324555200">- Explicitly list files we package.</changelog>
<changelog author="coolo@suse.com" date="1329652800">- Add more explicit requires of devel package: the pkgconfig
  file references some libraries in Libs (and not Requires), so we
  need to depend on them.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1357732800">- -Reintroduce gtkglext and Update to git-20110529 (bnc#799544):
  * no longer depends on pangox
- NOTE: gtkglext is unmaintained and provided as-is for 3rd party
  packages only. Nothing inside openSUSE is supposed to use it.</changelog>

</package>
<package pkgid="1fe827b4639c59399736d441a0892b81b7a8ba0ad663777415611caca26b68bf" name="libipa_hbac-devel" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="517715227b6d2d4c9fa82b9aed7fc945cdb7b8f1483a0e770475928070862140" name="libipa_hbac0" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="0d040aec0af278d18650f42320e52fda77baef5954be197daa1eca012b61f537" name="libmono-2_0-1" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="4e9b123ce90ba9ff45aae55dc034266860371f999864238e4e5ef2b1865d44f5" name="libmono-2_0-devel" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="3cd98665ed2cc3193664e7629bde11689e81339ce146eadeb7ee91ef367dee2a" name="libmonosgen-2_0-0" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="070e599bc125f62b5d1dfaa35ec0545fd7c06ed529b06d9eeb9543ebc20b29d6" name="libmonosgen-2_0-devel" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="c263dbafd8386c2efbb02b978a89dd56fa0e8c94696ae75a94f97010d2d4dbf4" name="libsss_idmap-devel" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="8ebe77ee9bb56687b8a71c3c3fc5423f0ea20ccc2da88340a62901ba4dc49538" name="libsss_idmap0" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="2e50259509a88360e644f91105dd76b4cfc2e707b94c00f294c3e073510dc614" name="libsss_sudo" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="ce2277ef9788fb346473d11377492e8650e7eee4a54da5ab25d1aaabf148759e" name="mono-complete" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="bb701ff379832d5d40162f0a675588674e9152a6bebeddb23994b99f4f1a32c1" name="mono-core" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="e76ebc43203e20a57bc79342fb580c35e252f3aabf5a761efc92597812cb7381" name="mono-data" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="f21d6dce6a79122e478d86de4b8d4424c8ae0aaa0ddaa4661ad1cf1a730bc91f" name="mono-data-oracle" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="8bed1ab69dc91f8e9b24b93556b5137790b5573dd12f9fdc845f0bd3dbb4e20e" name="mono-data-postgresql" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="2e8cebddee2d552f98fafe33cb410f5341624f0a3a5fac10d9d3058bf092aff9" name="mono-data-sqlite" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="8f660c2e84bf632b354156eb0933d7f2c0fea951bcaa7566a1398cab921cb8fd" name="mono-devel" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="42e71057f5011ff87b18536c47448f4fb65c47d585e4a412819c09ddb61e3e60" name="mono-entityframework" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="df639344e072d4c8f6688add09b7e30b7f3acee56301e7c97996aa0cab24b62e" name="mono-extras" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="e071ae9bb1a5c5026233ace39c5d49abd50c1f2ee00f6cde2f624ecec5f64e95" name="mono-locale-extras" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="5a5b545c1970b3378ab032aef613a7e856057176dda47778fa8cb2e7acb23b83" name="mono-mvc" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="d50c84677da87c2f9ab9c88b1397a29cb071d3f2e961235ec41b71661ac72b53" name="mono-nunit" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="2803f01bf716588ed34c7f713c1a515b05fce9601bc290e34cdbf418f976597a" name="mono-reactive" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="9b9e7fdccdad688fa4e9c7866a071bec78abee2873012509bc12d54bb70595f7" name="mono-wcf" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="1cef70b2a8f3a64f48833e4677bf7b6888783e94355f5104dfcd44dbe5e28a3a" name="mono-web" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="8b34c22e244c31345fd2db8749ab2ea4a805e5c3f68d8fe62787fcc9e370b678" name="mono-winforms" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="255565548806fda523bdd249a0ab84dd9673d75b636f2324c3a6a55c2a2b7cc1" name="mono-winfxcore" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="23ee914b80c030e20d3055c737ed4001599c0f8be77be94ed222a2ff81bcdcae" name="monodoc-core" arch="x86_64">
    <version epoch="0" ver="3.0.4" rel="1.4.1"/>

<changelog author="ajorgensen@novell.com" date="1298376000">- Update to 2.10
  * http://www.go-mono.com/archive/2.10</changelog>
<changelog author="ajorgensen@novell.com" date="1301918400">- libmono devel package must require libmono</changelog>
<changelog author="ajorgensen@novell.com" date="1303905600">- Update to 2.10.2
  * http://www.go-mono.com/archive/2.10.2</changelog>
<changelog author="dmueller@suse.de" date="1317988800">- update to 2.10.6
  * http://www.go-mono.com/archive/2.10.6</changelog>
<changelog author="agraf@suse.de" date="1322395200">- fix arm build to not depend on the build host's /proc/cpuinfo</changelog>
<changelog author="agraf@suse.de" date="1322395200">- use vfp on armv7</changelog>
<changelog author="agraf@suse.de" date="1322395200">- add arch linux vfp patch</changelog>
<changelog author="agraf@suse.de" date="1322827200">- use hammer approach for vfp instead</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- fix ppc build</changelog>
<changelog author="dvaleev@suse.com" date="1349438400">- workaround for ppc build with mcs-docs enabled
  use --with-sigaltstack=no (bxc#6440)</changelog>
<changelog author="sshaw@decriptor.com" date="1350648000">- Update to mono 3.0.0
  * C# 5.0 - async!
  * IKVM
  * 4.5 profile
  * New assemblies - System.Net.Http, System.Threading.Task.Dataflow
  * Microsoft's open source ASP.NET WebStack
  * Entity Framework
  * sgen
  * Runtime Optimizations
  * Code Contracts
  * Partial suppor for Portable Class Libraries
  * Improved GDB support for SGenGC internals
  * Lots of bug fixes</changelog>
<changelog author="sshaw@decriptor.com" date="1352635200">- Updated to mono 3.0.1
  * Bug fixes to the 3.0.0 release</changelog>
<changelog author="sshaw@decriptor.com" date="1355572800">- Updated to mono 3.0.2
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="adrian@suse.de" date="1355745600">- fix patches for arm*
- do not detect hard fp support in gcc (mono is not supporting it yet for real)</changelog>
<changelog author="dvaleev@suse.com" date="1356609600">- Fix ppc build failures (ppc.patch)</changelog>
<changelog author="mailaender@opensuse.org" date="1357905600">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.3
  * Bug fixes to the 3.0.x series
- new sub-package mono-reactive including http://rx.codeplex.com/</changelog>
<changelog author="dimstar@opensuse.org" date="1359460800">- Add mono-core-target-4.0.patch: Use .Net runtime 4.0 as default
  for Nunit and Cairo.</changelog>
<changelog author="mailaender@opensuse.org" date="1361620800">- Update to http://www.mono-project.com/Release_Notes_Mono_3.0.4
  * Bug fixes to the 3.0.x series</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Add missing Provides: for monodevelop 4.0</changelog>
<changelog author="idonmez@suse.com" date="1362571200">- Remove hardcoded lib directory from the config, this unbreaks
  running GDI+ programs on 64bit.</changelog>

</package>
<package pkgid="9338d619e41c5cf712bf380582b426c56ee22cbf4bd63b4b0cee30131381bc47" name="parkverbot" arch="x86_64">
    <version epoch="0" ver="1.1" rel="6.4.1"/>

<changelog author="jengelh@inai.de" date="1336478400">- Initial package for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1354536000">- Replace bad signature by a new one</changelog>
<changelog author="sbrabec@suse.cz" date="1354536000">- Verify GPG signature.</changelog>
<changelog author="jengelh@inai.de" date="1359633600">- Update to new upstream release 1.1 (bugfix release)
  * Fixed passing wrong type to ioctl, which made a 32-bit parkverbot
  exit and not run at all (bnc#801367)
  * Read all disks, rather than a single one, per interval
- systemd is not a runtime requirement</changelog>

</package>
<package pkgid="27b6280feb62e7063a15c917acd05323e31d5959a7ce38a6a89d699da2974042" name="python-ipa_hbac" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="5a5d74aa75c56a925a16a1db88c66c5054d34c940cee3c272d713f3d4ae847b6" name="python-sssd-config" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="64bc2a82746ac54f5db0aa76edcdeaf5da8628558f1f024d08fbc6c6eb0d93a3" name="sssd" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="8c870d015b0f6c66ac64d84ac2cda74e53aad2205425eedf1369282bb559077a" name="sssd-32bit" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="fa4051b64aee38bdd2dcd38af5c2f7430030fa685c2ff66723db290632da1473" name="sssd-ipa-provider" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="93c841927ab14ddaed0d9f4d956aebb6fe961439630cb2a7012fd3646722556b" name="sssd-tools" arch="x86_64">
    <version epoch="0" ver="1.9.4" rel="1.5.2"/>

<changelog author="rhafer@suse.de" date="1304510400">- Update to 1.5.7
  * A flaw was found in the handling of cached passwords when
    kerberos renewal tickets is enabled.  Due to a bug, the cached
    password was overwritten with a (moderately) predictable
    filename, which could allow a user to authenticate as someone
    else if they knew the name of the cache file (bnc#691135,
    CVE-2011-1758)
- Changes in 1.5.6:
  * Fixed a serious memory leak in the memberOf plugin
  * Fixed a regression with the negative cache that caused it to be
    essentially nonfunctional
  * Fixed an issue where the user's full name would sometimes be
    removed from the cache
  * Fixed an issue with password changes in the kerberos provider
    not working with kpasswd</changelog>
<changelog author="rhafer@suse.de" date="1307448000">- Update to 1.5.8:
  * Support for the LDAP paging control
  * Support for multiple DNS servers for name resolution
  * Fixes for several group membership bugs
  * Fixes for rare crash bugs</changelog>
<changelog author="jengelh@medozas.de" date="1311854400">- Update to new upstream release 1.5.11
  * Support for overriding home directory, shell and primary GID
  locally
  * Properly honor TTL values from SRV record lookups
  * Support non-POSIX groups in nested group chains (for RFC2307bis
  LDAP servers)
  * Properly escape IPv6 addresses in the failover code
  * Do not crash if inotify fails (e.g. resource exhaustion)
- Remove redundant %clean section; delete .la files more
  efficiently</changelog>
<changelog author="jengelh@medozas.de" date="1311940800">- Add patches to fix an fd leak in sssd_pam</changelog>
<changelog author="rhafer@suse.de" date="1312286400">- Fixed typos in configure args
- Cherry-picked password policy fixes from 1.5 branch (bnc#705768)
- switched to fd-leak fix cherry-picked from 1.5 branch
- Add /usr/sbin to the search path to make configure find nscd
  (bnc#709747)</changelog>
<changelog author="jengelh@medozas.de" date="1316433600">- Resolve "have choice for libnl-devel:
  libnl-1_1-devel libnl3-devel"</changelog>
<changelog author="rhafer@suse.de" date="1319025600">- Fixed systemd related packaging issues (bnc#724157)
- fixed build on older openSUSE releases</changelog>
<changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 1.8.0
  * Support for the service map in NSS
  * Support for setting default SELinux user context from FreeIPA
  * Support for retrieving SSH user and host keys from LDAP
  * Support for caching autofs LDAP requests
  * Support for caching SUDO rules
  * Include the IPA AutoFS provider
  * Fixed several memory-corruption bugs
  * Fixed a regression in the proxy provider</changelog>
<changelog author="ben.kevan@gmail.com" date="1333540800">- Update to new upstream release 1.8.1
  * Resolve issue where we could enter an infinite loop trying to
  connect to an auth server</changelog>
<changelog author="ben.kevan@gmail.com" date="1334059200">- Add suse_version condition for glib over libunistring for
  SLES 11 SP2.
- Update to new upstream release 1.8.2
  * Fix for GSSAPI binds when the keytab contains unrelated
  principals
  * Workarounds added for LDAP servers with unreadable RootDSE</changelog>
<changelog author="ben.kevan@gmail.com" date="1334318400">- Fix build error on SLES 11 builds</changelog>
<changelog author="jengelh@inai.de" date="1336651200">- Update to new upstream release 1.8.3
  * LDAP: Handle situations where the RootDSE is not available
  anonymously
  * LDAP: Fix regression for users using non-standard LDAP attributes
  for user information
- Switch from openssl to mozilla-nss, as this is the officially
  supported crypto integration</changelog>
<changelog author="jengelh@inai.de" date="1340798400">- Update to new upstream release 1.8.93 (1.9.0~beta3)
  * Add native support for autofs to the IPA provider
  * Support for id mapping when connecting to Active Directory
  * Support for handling very large (&gt; 1500 users) groups in
  Active Directory
  * Add a new fast in-memory cache to speed up lookups of cached data
  on repeated requests
  * Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
  * Add a new PAC responder for dealing with cross-realm Kerberos
  trusts
  * Terminate idle connections to the NSS and PAM responders</changelog>
<changelog author="jengelh@inai.de" date="1352548800">- Update to new upstream release 1.9.2
  * Users or groups from trusted domains can be retrieved by UID or
  GID as well
  * Several fixes that mitigate file descriptor leak during logins
  * SSH host keys are also removed from the cache after being
  removed from the server
  * Fix intermittent crash in responders if the responder was
  shutting down while requests were still pending
  * Catch an error condition that might have caused a tight loop in
  the sssd_nss process while refreshing expired enumeration request
  * Fixed memory hierarchy of subdomains discovery requests that
  caused use-after-free access bugs
  * The krb5_child and ldap_child processes can print libkrb5 tracing
  information in the debug logs</changelog>
<changelog author="jengelh@inai.de" date="1354795200">- Update to new upstream release 1.9.3
  * Many fixes related to deployments where the SSSD is running as
  a client of IPA server with trust relation established with an
  Active Directory server
  * Multiple fixes related to correct reporting of group
  memberships, especially in setups that use nested groups
  * Fixed a bug that prevented upgrade from the 1.8 series if the
  cache contained nested groups before the upgrade
  * Restarting the responders is more robust for cases where the
  machine is under heavy load during back end restart
  * The default_shell option can now be also set per-domain in
  addition to global setting.</changelog>
<changelog author="rhafer@suse.com" date="1354795200">- Switch back to using libcrypto instead of mozilla-nss as it seems
  to be supported upstream again, cf.
  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
- Cleanup PAM configuration after uninstalling sssd (bnc#788328)</changelog>
<changelog author="rhafer@suse.com" date="1355140800">- Removed left-over "Requires" for no longer existing sssd-client
  subpackage.
- New patch: sssd-ldflags.diff to fix link failures due to erroneous
  LDFLAGS usage</changelog>
<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff</changelog>

</package>
<package pkgid="1601282703131d85bc74c348e43141f942f5996b6c0543158531b682224bd459" name="systemtap" arch="x86_64">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="8a4b0da6f6139f2499f814b22a46a12843d8bee18a4c6d793148bb76a8927278" name="systemtap-runtime" arch="x86_64">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="762cc7e39d5f864e4f960178d940bcb4ef288a0f096e69d5d2525d37996d99e6" name="systemtap-sdt-devel" arch="x86_64">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="310a1c1d2812bcd07c68d2a13e23a1bf8f13a7838e591720952ec60af091c971" name="systemtap-server" arch="x86_64">
    <version epoch="0" ver="2.0" rel="2.4.1"/>

<changelog author="tonyj@novell.com" date="1259755200">- Fixes for CVE-2009-2911, BNC#548361</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Update to version 1.1
- Fixes for CVE-2009-4273 (second part, also known as CVE-2010-0412) and
  CVE-2010-0411.
- Fix parsing error (systemtap-prevent-nested-arg.diff)</changelog>
<changelog author="tonyj@novell.com" date="1268308800">- Add dependancies for systemtap shell scripts (coreutils, zip, avahi)</changelog>
<changelog author="vuntz@opensuse.org" date="1279713600">- Add python Requires to sdt-devel subpackage since dtrace is a
  python script.</changelog>
<changelog author="tonyj@novell.com" date="1282824000">- Update from version 1.1 to version 1.3
  Upstream release notes:
  1.3: http://sourceware.org/ml/systemtap/2010-q3/msg00098.html
  1.2: http://sourceware.org/ml/systemtap/2010-q1/msg00740.html</changelog>
<changelog author="bg@novell.com" date="1283688000">- fix build for hppa</changelog>
<changelog author="coolo@novell.com" date="1284379200">- take fix for pr11940 from systemtap git</changelog>
<changelog author="trenn@novell.com" date="1295006400">- Hopefully fix bnc#664105:
  Kernel segfault in kernel/timer.c - comm: stapio (process) - related to preloadtrace.ko</changelog>
<changelog author="tonyj@novell.com" date="1295611200">- Update to version 1.4
  Changes in this release: https://lkml.org/lkml/2011/1/17/101
  Drop patches:
  systemtap-hppa.diff
  systemtap-support-2.6.36.diff
  systemtap_fix_mod_vs_del_timer_race.patch
  systemtap_improve_gettimeofday_stability.patch</changelog>
<changelog author="jslaby@suse.de" date="1300190400">- add ifdef CLONE_STOPPED to fix compilation on newer kernels</changelog>
<changelog author="idoenmez@novell.com" date="1304337600">- Add systemtap-1.4-gcc46.patch to fix compilation with gcc 4.6</changelog>
<changelog author="tonyj@novell.com" date="1313755200">- Fix for bnc#710291 - systemtap: fails rpmlint check non-ghost-in-var-run</changelog>
<changelog author="jslaby@suse.de" date="1320235200">- update to 1.6
  changes 1.5-1.6: http://sourceware.org/ml/systemtap/2011-q3/msg00105.html
  changes 1.4-1.5: http://sourceware.org/ml/systemtap/2011-q2/msg00218.html</changelog>
<changelog author="aj@suse.de" date="1322049600">- Create tmpfiles during new install.</changelog>
<changelog author="tonyj@suse.com" date="1329566400">- Upgrade to version 1.7
  Changelog: http://sourceware.org/ml/systemtap/2012-q1/msg00097.html</changelog>
<changelog author="jslaby@suse.de" date="1340020800">- Upgrade to version 1.8
  Changelog: http://sourceware.org/ml/systemtap/2012-q2/msg00277.html</changelog>
<changelog author="aj@suse.de" date="1343390400">- Fix build with glibc 2.16</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Fix build with new systemd location.</changelog>
<changelog author="tonyj@suse.com" date="1355486400">- Update to version 2.0
  Changelog: http://sourceware.org/ml/systemtap/2012-q4/msg00047.html
- Delete previous patches (present in version 2.0):
  link-with-pthread.patch
  systemtap-linux-types.patch
- Add patches:
  systemtap-fix-for-kernels-without-vm_executable.patch</changelog>
<changelog author="tonyj@suse.com" date="1361534400">- Change how systemtap looks for tracepoint header files
  (bnc#796574, new patch: systemtap-build-source-dir.patch)
- Add libebl1 dependancy. Systemtap manually loads libebl backends and
  the manual Requires: was incorrectly removed in a previous revision
  (bnc#800335)</changelog>

</package>
<package pkgid="25fa8dfbb50220288be6821ff9dff69de530751eb80f3b6f89b578611bf1056e" name="xulrunner-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="8d69abb068351262e6c1aab7d212fc9475cc2257527644fd364c0d9bad585d22" name="timezone" arch="x86_64">
    <version epoch="0" ver="2013a" rel="2.5.1"/>

<changelog author="dmueller@suse.de" date="1315915200">- update to 2011j:
  * Fix past timezones for Kenya, Uganda, and Tanzani
  * Samoa uses DST in 2011-2012 starting on September 24th 3am</changelog>
<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>

</package>
<package pkgid="04a331816d550d8109757037ebf95e43888bbc1c371ae8672b0540238035fd5c" name="timezone" arch="x86_64">
    <version epoch="0" ver="2013b" rel="2.9.1"/>

<changelog author="dmueller@suse.de" date="1317556800">- update to 2011k:
  * Palestine suspends DST during Ramadan in 2011;
    Gaza and Hebron split in 2011, leading to a new
    Asia/Hebron zone (thanks to Steffen Thorsen and
    Alexander Krivenshev).
  * Belarus adopts permanent DST in 2011
    (thanks to Yauhen Kharuzhy, Alexander Bokovoy,
    Alexander Krivenyshev, and Kirill A. Shutemov).
  * Ukraine adopts permanent DST in 2011
  * "Russia" rules changed to reflect end of use in 2010.
  * "FET" used as abbreviation for Belarus, Ukraine,
    and western Russia (thanks to Paul Eggert).</changelog>
<changelog author="dmueller@suse.de" date="1318593600">- update to 2011l:
  * West Bank ended DST 2011-09-30 already
  * Fiji enters DST on October 23th 2011</changelog>
<changelog author="dmueller@suse.de" date="1319457600">- update to 2011m (bnc#726162):
  * All Ukrainian timezones are going back to winter time
    on Oct 30th, 2011
  * Adding Tiraspol to the zone.tab
  * America/Bahia switched to DST on Oct 16th, 2011</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- apply patches also for timezone-java
- add patch to fix Tiraspol split</changelog>
<changelog author="dmueller@suse.de" date="1319544000">- fix build failure of timezone-java</changelog>
<changelog author="dmueller@suse.de" date="1320494400">- update to 2011n:
  * Cuba (America/Havana) has extended summer time to end on Nov 13
  * Europe/Tiraspol decided not to split from the rest of Moldova, hence
  that zone has been removed
  * Fiji end of summer time was moved fromrward from Feb 26 to Jan 22</changelog>
<changelog author="dmueller@suse.de" date="1330776000">- update to 2012b (bnc#748550):
  * Cuba has delayed start of DST by 3 weeks
  (now starts April 1 rather than March 11
  * Chile 2011/2012 and 2012/2013 summer time date adjustments.
  * Falkland Islands onto permanent summer time (we're assuming for the
    foreseeable future, though 2012 is all we're fairly certain of.)
  * Armenia has abolished Summer Time.
  * Tokelau jumped the International Date Line back last December
    (just the same as their near neighbour, Samoa).
  * America/Creston is a new zone for a small area of British Columbia
  * There will be a leapsecod 2012-06-30 23:59:60 UTC.</changelog>
<changelog author="dmueller@suse.de" date="1333022400">- adjust license to spdx.org format (bnc#752642)</changelog>
<changelog author="dmueller@suse.de" date="1333368000">- update to 2012c:
  * Morocco DST starts late April 2012
  * Changes for Gaza, Hebron and Syria (for 2012)
  * Haiti now follows US/Canada rules regarding DST</changelog>
<changelog author="dmueller@suse.com" date="1343131200">- update to 2012d (bnc#771369):
  * Morocco DST is interrupted during Ramadan 2012
  (July 20th- August 19th)</changelog>
<changelog author="dmueller@suse.com" date="1344254400">- update to 2012e:
  * Pacific/Fakaofo: Tokelau is UTC+13, not UTC+14</changelog>
<changelog author="fcrozat@suse.com" date="1345464000">- Add tzcode-symlink.patch: use a symlink to create /etc/localtime
  (bnc#773491)
- Do not apply tzcode-link.diff on openSUSE &gt;= 12.2 (bnc#773491).</changelog>
<changelog author="dmueller@suse.com" date="1347537600">- cleanup stale rpmnew / symlink of posixrules to /etc/localtime (bnc#762210)
- remove %config part on posixrules symlink, it is not a config file
- update to 2012f (bnc#780276):
  * Fiji DST is October 21st 2012 -&gt; January 20th, 2013</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1347710400">- Update Url from the glibc page (which doesn't talk
  about timezone data at all (anymore?)) to the IANA
  page which is much more informative.</changelog>
<changelog author="dmueller@suse.com" date="1351339200">- update to 2012h (bnc#787005):
  * Samoa fall 2012 and later
  * Palestine fall 2012
  * Bahia no longer has DST
  * Tocantins has DST
  * Israel has new DST rules next year
  * Jordan stays on DST this winter</changelog>
<changelog author="dmueller@suse.com" date="1352116800">- update to 2012i:
  * Cuba switches DST on November 4th
- tzcode-ksh.diff: Obsolete, upstream uses bash now by default</changelog>
<changelog author="dmueller@suse.com" date="1352808000">- update to 2012j:
  * Libya moved to CET this weekend, but with DST planned next year</changelog>
<changelog author="schwab@linux-m68k.org" date="1359720000">- Define TM_GMTOFF and TM_ZONE like glibc did</changelog>
<changelog author="crrodriguez@opensuse.org" date="1362916800">- tzcode and tzdata 2013a
  - Change affecting binary data format:
  * The zone offset at the end of version-2-format zone files is now
  allowed to be 24:00, as per POSIX.1-2008.  (Thanks to Arthor David Olson.)
- Changes affecting current and future time stamps:
  * Chile's 2013 rules, and we guess rules for 2014 and later, will be
    the same as 2012, namely Apr Sun&gt;=23 03:00 UTC to Sep Sun&gt;=2 04:00 UTC.
  * New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- tzcode and tzdata 2013b
  * Haiti uses US daylight-saving rules this year, and presumably future years.
    This changes time stamps starting today.
  * Paraguay will end DST on March 24 this year.
  * Morocco does not observe DST during Ramadan.</changelog>

</package>
<package pkgid="1f6d735f9a5e71d6123411c6f6009415e8ce6c032ac9da851948bfc1a1d3d0f8" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="0b0b3736082e6ee50cbbe646569e0bf1563d2bd8df52d8457a6df3b7e93c1895" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="9036675feccdc21a9b2605f0049aa9755a164c115ca8a33ff9d855e54d102fe6" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="bcbfa2d0dd024bd33d61e99ca6a7509f4e88466f9564a019c5164c1519c9ef14" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="12a2cc9d05d2914091ed14c18b153363ce7b35acb61cbfcbbbfc8b8f67d39c12" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="769c23d88b8ea104068977ba8f94b06beb6512d38acd85086235e62b8574fce3" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="19.0.2" rel="1.4.1"/>

<changelog author="adrian@suse.de" date="1337774400">- fix build on arm</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Firefox 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix sound notifications when filename/path contains a whitespace
  (bmo#749739)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Firefox 13.0.1
  * bugfix release
- obsolete libproxy's mozjs pacrunner (bnc#759123)</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- fix crashreporter restart option (bmo#762780)
- require NSS 3.13.5
- remove mozjs pacrunner obsoletes again for now
- adopted mozilla-prefer_plugin_pref.patch
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Firefox 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- GStreamer is only used for MP4 (no WebM, OGG)
- updated filelist
- moved browser specific preferences to correct location</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to Firefox 15.0.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to Firefox 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)
- removed upstreamed mozilla-crashreporter-restart-args.patch
- webapprt now included
- use kmozillahelper's new REVEAL command (bnc#777415)
  (requires mozilla-kde4-integration &gt;= 0.6.4)
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Firefox 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to Firefox 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues
- bring back Obsoletes for libproxy's mozjs plugin for distributions
  before 12.2 to avoid crashes</changelog>
<changelog author="pcerny@suse.com" date="1353412800">- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Firefox 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to Firefox 17.0.1
  * revert some useragent changes introduced in 17.0
  * leaving private browsing with social enabled doesn't reset all
    social components (bmo#815042)
- fix KDE integration for file dialogs</changelog>
<changelog author="wr@rosenauer.org" date="1357473600">- update to Firefox 18.0 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- removed obsolete SLE11 patches (mozilla-gcc43*)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier
- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="schwab@linux-m68k.org" date="1357992000">- Fix WebRTC to build on powerpc</changelog>
<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="040ed7a1c796820373b29dfafeb6c3bb792dfd4b5de3a1d5e839020ee4e903fc" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="6edf49b0b0a91f6bfe4b1db180967dca240c90f7a45db6fb55d4533e69faa633" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="d72378f6cd660a65fd5a41468bdd2f855e17d27b2b7d77a9d1cf04d9e0d97006" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="1c86a91714e306582da2f11aa37b9273de5f9a229bfd99a67b726910048bf978" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="7b93b5687d3d25a5476d0493b7ff04f41235de7df6a03c11fb7f39f1696bbedd" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="05459dbe0bcbdd8ad5ac1cd1d31d56dd2480ee47e73f0064ae4e325284f15383" name="enigmail" arch="x86_64">
    <version epoch="0" ver="1.5.1+17.0.4" rel="61.5.1"/>

<changelog author="wr@rosenauer.org" date="1332849600">- update to Thunderbird 11.0.1 (bnc#755060)
  * Fixing an issue where filters can get messed up (bmo#735940)
  * Fixes a hang when switching IMAP folders, or doing other
    imap functions (bmo#733731)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to Thunderbird 12.0 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- update Enigmail to 1.4.1
- added mozilla-revert_621446.patch
- added mozilla-libnotify.patch (bmo#737646)
- added mailnew-showalert.patch (bmo#739146)
- added mozilla-gcc47.patch and mailnews-literals.patch to fix
  compilation issues with recent gcc 4.7
- disabled crashreporter temporarily for Factory (gcc 4.7 issue)</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Thunderbird 12.0.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1337169600">- reenabled crashreporter for Factory/12.2
  (fix in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to Thunderbird 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- fix build with system NSPR (mozilla-system-nspr.patch)
- add dependentlibs.list for improved XRE startup
- update enigmail to 1.4.2</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Thunderbird 13.0.1
  * bugfix release</changelog>
<changelog author="adrian@suse.de" date="1341489600">- no crashreport on %arm, fixing build</changelog>
<changelog author="wr@rosenauer.org" date="1342353600">- update to Thunderbird 14.0 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- update Enigmail to 1.4.3</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix mozilla-kde.patch to include sys/resource.h for getrlimit etc (glibc 2.16)</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to Thunderbird 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- update Enigmail to 1.4.4</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="b4ea2333afc4948d78b667038c8bafef6671ac5cd27d7db842ae216c30a4c27f" name="mozilla-js" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="b1d1b961032f39e77903db4c58222d9d371ef6278a783666dbdf0489f16e4e69" name="seamonkey" arch="x86_64">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="9cd5e690206a37f343e0dfd2d19991bd08a80d6a7fd643e2181397fbecff92ab" name="seamonkey-dom-inspector" arch="x86_64">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="8805f1a62a2f8d3662388026476843c66826c9f82980f369140fc5b5297da7d6" name="seamonkey-irc" arch="x86_64">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="e0e51cdba7e239638ae8bfa51a73b8af3fe4c411b5a43a4c3f3a24b9712643ad" name="seamonkey-translations-common" arch="x86_64">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="2b7255aa3fb4948353c56edf43d358a514aea3221b2bab148161f01b1034c176" name="seamonkey-translations-other" arch="x86_64">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="28e638516e26d094608950183c268c807fd18daf36806202c1cb9503d5fec83b" name="seamonkey-venkman" arch="x86_64">
    <version epoch="0" ver="2.16.1" rel="1.4.1"/>

<changelog author="wr@rosenauer.org" date="1335182400">- update to Seamonkey 2.9 (bnc#758408)
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds</changelog>
<changelog author="wr@rosenauer.org" date="1335528000">- fixed build with gcc 4.7</changelog>
<changelog author="wr@rosenauer.org" date="1335787200">- update to Seamonkey 2.9.1
  * fix regressions
  - POP3 filters (bmo#748090)
  - Message Body not loaded when using "Fetch Headers Only"
    (bmo#748865)
  - Received messages contain parts of other messages with
    movemail account (bmo#748726)
  - New mail notification issue (bmo#748997)
  - crash in nsMsgDatabase::MatchDbName (bmo#748432)</changelog>
<changelog author="wr@rosenauer.org" date="1338811200">- update to Seamonkey 2.10 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- requires NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to Seamonkey 2.10.1</changelog>
<changelog author="wr@rosenauer.org" date="1342440000">- update to Seamonkey 2.11 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
  * relicensed to MPL-2.0
- updated/removed patches
- requires NSS 3.13.5</changelog>
<changelog author="wr@rosenauer.org" date="1343563200">- import PPC patch from Firefox:
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc</changelog>
<changelog author="wr@rosenauer.org" date="1346068800">- update to SeaMonkey 2.12 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
- enable GStreamer for 12.1 and higher
- use internal libjpeg</changelog>
<changelog author="wr@rosenauer.org" date="1347278400">- update to SeaMonkey 2.12.1 (bnc#779936)
  * Sites visited while in Private Browsing mode could be found
    through manual browser cache inspection (bmo#787743)</changelog>
<changelog author="wr@rosenauer.org" date="1349697600">- update to SeaMonkey 2.13 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- improve GStreamer integration (bmo#760140)</changelog>
<changelog author="wr@rosenauer.org" date="1350043200">- update to SeaMonkey 2.13.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to SeaMonkey 2.13.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to SeaMonkey 2.14 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1355832000">- update to SeaMonkey 2.14.1
  * fix regressions from 2.14 release</changelog>
<changelog author="wr@rosenauer.org" date="1357646400">- update to SeaMonkey 2.15 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-06/CVE-2013-0751 (bmo#790454)
    Touch events are shared across iframes
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- reenable WebRTC
- added mozilla-libproxy-compat.patch for libproxy API compat
  on openSUSE 11.2 and earlier</changelog>
<changelog author="wr@rosenauer.org" date="1358078400">- backed out restartless language packs as it broke multi-locale
  setup (bmo#677092, bmo#818468)</changelog>
<changelog author="wr@rosenauer.org" date="1358683200">- update to SeaMonkey 2.15.1
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359979200">- update to SeaMonkey 2.15.2
  * Applications could not be removed from the "Application details"
    dialog under Preferences, Helper Applications (bmo#826771).
  * View / Message Body As could show menu items out of context
    (bmo#831348)</changelog>
<changelog author="wr@rosenauer.org" date="1361188800">- update to SeaMonkey 2.16 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch</changelog>
<changelog author="wr@rosenauer.org" date="1362830400">- update to SeaMonkey 2.16.1 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="0ab74c3fda511883abaeb19567aab607971edf249b575e743b79682c58b755f9" name="xulrunner" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="1f447220f4f161f853d3e353a424e47d096bdc568374e947b5a0ca4d1cf43658" name="xulrunner-buildsymbols" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="5b29d9d516743130766f0489d2b0a27a71069afe08a87e1f23ffed3084ba492b" name="xulrunner-devel" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="1dd25059df46d19a60a1f268d292e0ed25fab0cf6d2d3a70d6ef60406711546b" name="mozilla-js-32bit" arch="x86_64">
    <version epoch="0" ver="17.0.4" rel="1.4.2"/>

<changelog author="wr@rosenauer.org" date="1324641600">- update to Firefox 9.0.1
  * (strongparent) parentNode of element gets lost (bmo#335998)</changelog>
<changelog author="wr@rosenauer.org" date="1327924800">- update to version 10.0 (bnc#744275)
  * MFSA 2012-01/CVE-2012-0442/CVE-2012-0443
    Miscellaneous memory safety hazards
  * MFSA 2012-03/CVE-2012-0445 (bmo#701071)
    &lt;iframe&gt; element exposed across domains via name attribute
  * MFSA 2012-04/CVE-2011-3659 (bmo#708198)
    Child nodes from nsDOMAttribute still accessible after removal
    of nodes
  * MFSA 2012-05/CVE-2012-0446 (bmo#705651)
    Frame scripts calling into untrusted objects bypass security
    checks
  * MFSA 2012-06/CVE-2012-0447 (bmo#710079)
    Uninitialized memory appended when encoding icon images may
    cause information disclosure
  * MFSA 2012-07/CVE-2012-0444 (bmo#719612)
    Potential Memory Corruption When Decoding Ogg Vorbis files
  * MFSA 2012-08/CVE-2012-0449 (bmo#701806, bmo#702466)
    Crash with malformed embedded XSLT stylesheets
- removed obsolete ppc64 patch
- disable neon for ARM as it doesn't build correctly</changelog>
<changelog author="dvaleev@suse.com" date="1328616000">- Use YARR interpreter instead of PCRE on platforms where YARR JIT
  is not supported, since PCRE doesnt build (bmo#691898)
- fix ppc64 build (bmo#703534)</changelog>
<changelog author="wr@rosenauer.org" date="1328788800">- update to version 10.0.1 (bnc#746616)
  * MFSA 2012-10/CVE-2012-0452 (bmo#724284)
    use after free in nsXBLDocumentInfo::ReadPrototypeBindings</changelog>
<changelog author="wr@rosenauer.org" date="1329393600">- update to version 10.0.2 (bnc#747328)
  * CVE-2011-3026 (bmo#727401)
    libpng: integer overflow leading to heap-buffer overflow</changelog>
<changelog author="wr@rosenauer.org" date="1331294400">- update to version 11.0 (bnc#750044)
  * MFSA 2012-13/CVE-2012-0455 (bmo#704354)
    XSS with Drag and Drop and Javascript: URL
  * MFSA 2012-14/CVE-2012-0456/CVE-2012-0457 (bmo#711653, #720103)
    SVG issues found with Address Sanitizer
  * MFSA 2012-15/CVE-2012-0451 (bmo#717511)
    XSS with multiple Content Security Policy headers
  * MFSA 2012-16/CVE-2012-0458
    Escalation of privilege with Javascript: URL as home page
  * MFSA 2012-17/CVE-2012-0459 (bmo#723446)
    Crash when accessing keyframe cssText after dynamic modification
  * MFSA 2012-18/CVE-2012-0460 (bmo#727303)
    window.fullScreen writeable by untrusted content
  * MFSA 2012-19/CVE-2012-0461/CVE-2012-0462/CVE-2012-0464/
    CVE-2012-0463
    Miscellaneous memory safety hazards
- fix build on ARM
- disable jemalloc on s390(x)</changelog>
<changelog author="wr@rosenauer.org" date="1335009600">- update to 12.0 (bnc#758408)
  * rebased patches
  * MFSA 2012-20/CVE-2012-0467/CVE-2012-0468
    Miscellaneous memory safety hazards
  * MFSA 2012-22/CVE-2012-0469 (bmo#738985)
    use-after-free in IDBKeyRange
  * MFSA 2012-23/CVE-2012-0470 (bmo#734288)
    Invalid frees causes heap corruption in gfxImageSurface
  * MFSA 2012-24/CVE-2012-0471 (bmo#715319)
    Potential XSS via multibyte content processing errors
  * MFSA 2012-25/CVE-2012-0472 (bmo#744480)
    Potential memory corruption during font rendering using cairo-dwrite
  * MFSA 2012-26/CVE-2012-0473 (bmo#743475)
    WebGL.drawElements may read illegal video memory due to
    FindMaxUshortElement error
  * MFSA 2012-27/CVE-2012-0474 (bmo#687745, bmo#737307)
    Page load short-circuit can lead to XSS
  * MFSA 2012-28/CVE-2012-0475 (bmo#694576)
    Ambiguous IPv6 in Origin headers may bypass webserver access
    restrictions
  * MFSA 2012-29/CVE-2012-0477 (bmo#718573)
    Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues
  * MFSA 2012-30/CVE-2012-0478 (bmo#727547)
    Crash with WebGL content using textImage2D
  * MFSA 2012-31/CVE-2011-3062 (bmo#739925)
    Off-by-one error in OpenType Sanitizer
  * MFSA 2012-32/CVE-2011-1187 (bmo#624621)
    HTTP Redirections and remote content can be read by javascript errors
  * MFSA 2012-33/CVE-2012-0479 (bmo#714631)
    Potential site identity spoofing when loading RSS and Atom feeds
- added mozilla-libnotify.patch to allow fallback from libnotify
  to xul based events if no notification-daemon is running
- gcc 4.7 fixes
  * mozilla-gcc47.patch
  * disabled crashreporter temporarily for Factory</changelog>
<changelog author="wr@rosenauer.org" date="1338638400">- update to 13.0 (bnc#765204)
  * MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101
    Miscellaneous memory safety hazards
  * MFSA 2012-36/CVE-2012-1944 (bmo#751422)
    Content Security Policy inline-script bypass
  * MFSA 2012-37/CVE-2012-1945 (bmo#670514)
    Information disclosure though Windows file shares and shortcut
    files
  * MFSA 2012-38/CVE-2012-1946 (bmo#750109)
    Use-after-free while replacing/inserting a node in a document
  * MFSA 2012-40/CVE-2012-1947/CVE-2012-1940/CVE-2012-1941
    Buffer overflow and use-after-free issues found using Address
    Sanitizer
- require NSS 3.13.4
  * MFSA 2012-39/CVE-2012-0441 (bmo#715073)
- reenabled crashreporter for Factory/12.2
  (fixed in mozilla-gcc47.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1339761600">- update to 13.0.1
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1342267200">- update to 14.0.1 (bnc#771583)
  * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948
    Miscellaneous memory safety hazards
  * MFSA 2012-43/CVE-2012-1950
    Incorrect URL displayed in addressbar through drag and drop
  * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1952
    Gecko memory corruption
  * MFSA 2012-45/CVE-2012-1955 (bmo#757376)
    Spoofing issue with location
  * MFSA 2012-46/CVE-2012-1966 (bmo#734076)
    XSS through data: URLs
  * MFSA 2012-47/CVE-2012-1957 (bmo#750096)
    Improper filtering of javascript in HTML feed-view
  * MFSA 2012-48/CVE-2012-1958 (bmo#750820)
    use-after-free in nsGlobalWindow::PageHidden
  * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559)
    Same-compartment Security Wrappers can be bypassed
  * MFSA 2012-50/CVE-2012-1960 (bmo#761014)
    Out of bounds read in QCMS
  * MFSA 2012-51/CVE-2012-1961 (bmo#761655)
    X-Frame-Options header ignored when duplicated
  * MFSA 2012-52/CVE-2012-1962 (bmo#764296)
    JSDependentString::undepend string conversion results in memory
    corruption
  * MFSA 2012-53/CVE-2012-1963 (bmo#767778)
    Content Security Policy 1.0 implementation errors cause data
    leakage
  * MFSA 2012-55/CVE-2012-1965 (bmo#758990)
    feed: URLs with an innerURI inherit security context of page
  * MFSA 2012-56/CVE-2012-1967 (bmo#758344)
    Code execution through javascript: URLs
- license change from tri license to MPL-2.0
- require NSS 3.13.5
- PPC fixes:
  * reenabled mozilla-yarr-pcre.patch to fix build for PPC
  * add patches for bmo#750620 and bmo#746112
  * fix xpcshell segfault on ppc
- build plugin-container on every arch</changelog>
<changelog author="dmueller@suse.com" date="1345204800">- fix build on ARM:
  * disable crashreporter, it does not build
  * reduce debuginfo during built to avoid running out of memory</changelog>
<changelog author="wr@rosenauer.org" date="1345982400">- update to 15.0 (bnc#777588)
  * MFSA 2012-57/CVE-2012-1970
    Miscellaneous memory safety hazards
  * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1975
    CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE-2012-3959
    CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE-2012-3964
    Use-after-free issues found using Address Sanitizer
  * MFSA 2012-59/CVE-2012-1956 (bmo#756719)
    Location object can be shadowed using Object.defineProperty
  * MFSA 2012-60/CVE-2012-3965 (bmo#769108)
    Escalation of privilege through about:newtab
  * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793)
    Memory corruption with bitmap format images with negative height
  * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968
    WebGL use-after-free and memory corruption
  * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970
    SVG buffer overflow and use-after-free issues
  * MFSA 2012-64/CVE-2012-3971
    Graphite 2 memory corruption
  * MFSA 2012-65/CVE-2012-3972 (bmo#746855)
    Out-of-bounds read in format-number in XSLT
  * MFSA 2012-66/CVE-2012-3973 (bmo#757128)
    HTTPMonitor extension allows for remote debugging without explicit
    activation
  * MFSA 2012-68/CVE-2012-3975 (bmo#770684)
    DOMParser loads linked resources in extensions when parsing
    text/html
  * MFSA 2012-69/CVE-2012-3976 (bmo#768568)
    Incorrect site SSL certificate data display
  * MFSA 2012-70/CVE-2012-3978 (bmo#770429)
    Location object security checks bypassed by chrome code
  * MFSA 2012-72/CVE-2012-3980 (bmo#771859)
    Web console eval capable of executing chrome-privileged code
- fix HTML5 video crash with GStreamer enabled (bmo#761030)
- fixed filelist</changelog>
<changelog author="wr@rosenauer.org" date="1349611200">- update to 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- requires NSPR 4.9.2
- removed upstreamed mozilla-crashreporter-restart-args.patch
- updated translations-other with new languages</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351080000">- update to 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-95/CVE-2012-4203 (bmo#765628)
    Javascript: URLs run in privileged context on New Tab page
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-104/CVE-2012-4210 (bmo#796866)
    CSS and HTML injection through Style Inspector
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)</changelog>
<changelog author="wr@rosenauer.org" date="1354190400">- update to 17.0.1
  * regression/compatibility fixes</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to 17.0.2esr (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to 17.0.3esr (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>

</package>
<package pkgid="087fa158569a8857770da994c1ca53af7f2af9816d37fe52fab24e53e38627da" name="nagios-nsca" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="5.4.1"/>

<changelog author="tsieden@suse.de" date="1165492800">- package split: nagios-nsca for the server and
  nagios-nsca-client for the remote host
- removed unneeded BuildRequires (nagios)</changelog>
<changelog author="tsieden@suse.de" date="1170072000">- update to version 2.7
  * Fixed crash from malformed command line
    (therefore removed removed nagios-nsca.send_nsca.formatstring.patch)
  * Updated to config.sub and config.guess to latest from GNU Savannah
  * changed default user and group to nagios nagios (#236135)</changelog>
<changelog author="tsieden@suse.de" date="1171022400">- update to version 2.7.1
  * Fixed bug that prevented single mode daemon from working properly
  * Added sample scripts for testing functionality to nsca_tests/
    (Ton Voon/Altinity)</changelog>
<changelog author="tsieden@suse.de" date="1187006400">- update to version 2.7.2
  * fixed bug with NSCA daemon eating CPU if child process
  couldn't accept a connection in multi-process mode (Chris Wilson)</changelog>
<changelog author="tsieden@suse.de" date="1188561600">- cleanup spec file (removed unneeded %dir entry)</changelog>
<changelog author="schneemann@b1-systems.de" date="1320926400">- update to version 2.9
  * Add config directive to submit directly to checkresults directory (Mike Lindsey)
  * Support multi-line check output with 4000 character limit (Mike Lindsey)
- fixes in skipped version 2.8
  * Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki)
  * Fixed bug where daemon would segfault if mcrypt library was not initialized before timeout (Holger Weiss)
  * Fixed bug with switching from dump file to command file when running under single mode (Ton Voon)
  * Fix for small memory leak with running as a single process daemon (Daniel)</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="lars@linux-schulserver.de" date="1328270400">- update to 2.9.1:
  + Applied patch to allow packets arriving with a future time stamp
    (Daniel Wittenberg)
  + Updated server (nsca) to allow packets with older, smaller
    packet size (Eric Stanley)
- use macros from nagios-rpm-macros package
- added rpmlintrc</changelog>
<changelog author="lars@linux-schulserver.de" date="1349956800">- recommend 'monitoring_daemon' to allow nsca to run with
  compatible monitoring solutions</changelog>
<changelog author="lars@linux-schulserver.de" date="1363262400">- added man pages for nsca and send_nsca (fixes bnc#804614)</changelog>

</package>
<package pkgid="485fcd872a8db5339334dc9dd2b34b5869bb1d19ebc05ae4e579da22e9034923" name="ewftools" arch="x86_64">
    <version epoch="0" ver="0.0.0+20120813" rel="2.4.1"/>

<changelog author="toganm@opensuse.org" date="1284465600">- Initial opensuse build service checkin</changelog>
<changelog author="toganm@opensuse.org" date="1315137600">- Reworked spec based on fedora package
- TODO
  +enable disktype for requires</changelog>
<changelog author="cfarrell@suse.com" date="1328529600">- license update: LGPL-3.0+
  No indication that LGPL-3.0 is the license (i.e. only). Looks like
  LGPL-3.0+</changelog>
<changelog author="saschpe@suse.de" date="1328702400">- Spec file cleanup:
  * Provide sane versioning, this will break updates in the 'security'
    project now, but this is better than breaking Factory updates later.
  * Don't "rm -rf %buildroot" in the %install section
  * Use upstream tarballs
  * Cleanup BuildRequires</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346846400">- upgrade to libewf-20120813
  * Bug fixes and multiple enhancements
  * soname update from 1 to 2
  * see ChangeLog
- remove pyver patch, now upstream
- add remove_date_time_macros.patch to keep builds consistent
- add zlib as requires as per sample specfile in tarball
- Add SLES build support</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346932800">- change license to GPL-3.0+ until upstream resolves LGPL-3.0+ status (BNC# 778993)
- run spec-cleaner
- make soname a define
- remove requires libewf from ewftools sub-package</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1362830400">- fix for ewfmount (bnc#808550)
  * fails with the error msg:  No sub system to mount EWF format.
  * added BuildRequires: fuse-devel
  * added Recommends: fuse   (ewfmount is not core functionality of this package)</changelog>

</package>
<package pkgid="e152a220440691cc274e6d96521acbf6fb0cf927216324b28ee53e8cd5223f5f" name="libewf-devel" arch="x86_64">
    <version epoch="0" ver="0.0.0+20120813" rel="2.4.1"/>

<changelog author="toganm@opensuse.org" date="1284465600">- Initial opensuse build service checkin</changelog>
<changelog author="toganm@opensuse.org" date="1315137600">- Reworked spec based on fedora package
- TODO
  +enable disktype for requires</changelog>
<changelog author="cfarrell@suse.com" date="1328529600">- license update: LGPL-3.0+
  No indication that LGPL-3.0 is the license (i.e. only). Looks like
  LGPL-3.0+</changelog>
<changelog author="saschpe@suse.de" date="1328702400">- Spec file cleanup:
  * Provide sane versioning, this will break updates in the 'security'
    project now, but this is better than breaking Factory updates later.
  * Don't "rm -rf %buildroot" in the %install section
  * Use upstream tarballs
  * Cleanup BuildRequires</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346846400">- upgrade to libewf-20120813
  * Bug fixes and multiple enhancements
  * soname update from 1 to 2
  * see ChangeLog
- remove pyver patch, now upstream
- add remove_date_time_macros.patch to keep builds consistent
- add zlib as requires as per sample specfile in tarball
- Add SLES build support</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346932800">- change license to GPL-3.0+ until upstream resolves LGPL-3.0+ status (BNC# 778993)
- run spec-cleaner
- make soname a define
- remove requires libewf from ewftools sub-package</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1362830400">- fix for ewfmount (bnc#808550)
  * fails with the error msg:  No sub system to mount EWF format.
  * added BuildRequires: fuse-devel
  * added Recommends: fuse   (ewfmount is not core functionality of this package)</changelog>

</package>
<package pkgid="9a2f0f550add6f39f693fd7f184385c2cdef2da63078367f9ab2c601daa48652" name="libewf2" arch="x86_64">
    <version epoch="0" ver="0.0.0+20120813" rel="2.4.1"/>

<changelog author="toganm@opensuse.org" date="1284465600">- Initial opensuse build service checkin</changelog>
<changelog author="toganm@opensuse.org" date="1315137600">- Reworked spec based on fedora package
- TODO
  +enable disktype for requires</changelog>
<changelog author="cfarrell@suse.com" date="1328529600">- license update: LGPL-3.0+
  No indication that LGPL-3.0 is the license (i.e. only). Looks like
  LGPL-3.0+</changelog>
<changelog author="saschpe@suse.de" date="1328702400">- Spec file cleanup:
  * Provide sane versioning, this will break updates in the 'security'
    project now, but this is better than breaking Factory updates later.
  * Don't "rm -rf %buildroot" in the %install section
  * Use upstream tarballs
  * Cleanup BuildRequires</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346846400">- upgrade to libewf-20120813
  * Bug fixes and multiple enhancements
  * soname update from 1 to 2
  * see ChangeLog
- remove pyver patch, now upstream
- add remove_date_time_macros.patch to keep builds consistent
- add zlib as requires as per sample specfile in tarball
- Add SLES build support</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1346932800">- change license to GPL-3.0+ until upstream resolves LGPL-3.0+ status (BNC# 778993)
- run spec-cleaner
- make soname a define
- remove requires libewf from ewftools sub-package</changelog>
<changelog author="Greg.Freemyer@gmail.com" date="1362830400">- fix for ewfmount (bnc#808550)
  * fails with the error msg:  No sub system to mount EWF format.
  * added BuildRequires: fuse-devel
  * added Recommends: fuse   (ewfmount is not core functionality of this package)</changelog>

</package>
<package pkgid="bdf9b020d3e61473514d4ad4bcd63a5f16a1e2d815b0cb6a493a123027fad569" name="gnome-control-center" arch="x86_64">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="4f0fb0d23aaa089db8c7abd9d8f2414d4813f0491e56c00a5bcd348317257fab" name="gnome-control-center-devel" arch="x86_64">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="0ef628b1a7c7223ff63f49dbe771f628b7ea0e732315f577f3216beb17b19539" name="gnome-control-center-user-faces" arch="x86_64">
    <version epoch="0" ver="3.6.3" rel="3.6.1"/>

<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.3:
  + All:
  - Use '&amp;' instead of 'and', keeping the names shorter but also
    keep the user focused on other words which compose the name
  + Background:
  - Make sure background can get cancelled
  - Avoid escaped wallpaper name in the UI
  + Brightness &amp; Lock:
  - Update slider when changing the brightness via keyboard keys
  + Info:
  - Add software media to "other media" dialogue
  - Add title for the "other media" dialog
  + Network:
  - Don't crash on hidden SSIDs
  - Fix packing order of children in the service dialog
  - Add mnemonic for a number of controls
  - Sort wireless first
  - Make list of Access Points more similar to the shell menu
  - Stop buttons jumping when switching between devices
  + Online Accounts:
  - Updated "Add Account" dialogue design
  - Improve layout when there are no configured accounts
  + Power:
  - Fix reference to "Screen" settings
  + Shell:
  - Fix crash when using keynav in overview
  - Don't animate between overview and search pages
  - Use GtkSearchEntry
  - Crasher fixes
  + Sound:
  - Add "audio" keyword
  - Fix mouse scrolls and clicking behaviour on sliders
  - Fix unmuting not working when dragging the event role slider
  + User accounts:
  - Add support for remote Kerberos accounts
  + Wacom:
  - Add keep aspect ratio option
  - Cancel calibration if window loses focus.
- Add krb5-devel BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.4:
  + Wacom:
  - Fix crasher related to display matching.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Update to version 3.5.5:
  + Brightness &amp; Lock:
  - Add a "Show Notifications" setting
  + Keyboard:
  - Fix a memory leak
  - Fix some shortcuts used by the shell not being available for
    capture
  + Network:
  - Fix a number of crashers that occurred after the network
    panel was closed
  - Make mobile broadband support usable
  - Sort Wi-Fi access points by strength
  - Fix VPN information
  + Printers:
  - Allow users to change printer's PPD file
  - Add "Options" dialogue with more options than available
    readily
  + Power and User Accounts:
  - Port to use GtkLevelBar
  + Region:
  - Add support for IBus input sources
  + Sound:
  - Move input streams when the default source changes
  - Add backend code to track inputs and outputs in PulseAudio
    2.0
  + Wacom:
  - Apply display rotation to devices
  - Destroy the display mapping dialogue on unplug
  - Show a mark when calibration succeeds.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Add man page
  + Brightness &amp; Lock:
  - Make "show notifications" available even if we don't lock
    the screen automatically
  + Display:
  - Fix possible error when the preferred mode is only
    available on one of the two outputs in mirror mode
  + Info:
  - Adapt for changed API in PackageKit
  - Small UI bug fixes
  + Network:
  - Refactoring for mobile broadband support and bug fixes
  - Split the wireless panel
  - Only show extra details for the active connection
  - Add network strength to the details panel
  - Only show the disconnect button when a device is fully
    activated
  - Fix crash with Access Points with non UTF-8 names
  - Forget the last selected wireless network when the button is
    clicked
  - Improve hotspot dialogue
  + Printers:
  - Add support for CUPS 1.6
  - Don't restrict the PPD list to PPDs with DeviceIDs
  - Cancel async operations correctly
  - Move jobs to a separate dialogue
  + Region:
  - Make ibus code more robust
  - Handle being opened twice gracefully
  - Require ibus 1.4.99 if ibus support is requested
  + User accounts:
  - Update for realmd 0.6
  - Strip remote D-Bus errors from user-visible messages
  - Fix memory leaks
  + Wacom:
  - Fix critical warning after calibration
  - Only do calibration for the selected tool
  + Updated translations.
- Disable gcc-private-connection.patch for now: needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Background:
  - Implement new design
  + Bluetooth:
  - Require a newer version of gnome-bluetooth
  + Keyboard:
  - Add common keyboard layout related options to the shortcuts tab
  + Mouse:
  - Implement new design, including support for natural scroll
  + Network:
  - Improve the Wi-Fi page layout
  + Online Accounts:
  - Allow opening a particular account from the command-line
  - Avoid spurious "No online accounts configured" overlay
  - Fix crash when loading the panel a second time
  + Shell:
  - Remove animations, they were causing a number of problems,
    but were a useful exercise for future developments.
  + Sound:
  - Remove hardware page, and offer different connectors directly
    from the input and output pages
  + Universal Access:
  - Add zoom shader options, and reorganise zoom dialogue
  + User Accounts:
  - UI changes for better remote accounts support
  - Fix crash with incompatible versions of realmd
  + Wacom:
  - Add support for "switch monitor" shortcut
  + Updated translations.
- Add gnome-control-center-bgpanel.patch: add missing includes.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Common:
  - Fix memory leaks in language sorting
  - Fix too big editable labels
  + Date &amp; Time:
  - Make map look unsensitive when the panel is locked
  + Display:
  - Fix possible warning on exit
  - Make 'Mirrored Displays' string consistent with
    GnomeRRLabeler
  + Info:
  - Add PolicyKit rules for hostname setting
  - Set related mime types when changing preferred apps
  + Mouse:
  - New testing area
  - Remove italics from test page
  - Fix left/right mouse-handedness radio buttons in RTL
    languages
  + Network:
  - Ignore unrecognised device types
  - Fix wired and mobile activations
  - Don't try to activate slave connections
  + Printers:
  - Redesign the "new printer" dialogue
  + Region &amp; Language:
  - Add Russian and Egyptian Arabic as common languages
  - Don't use IBus in fallback mode
  - Honor the 'show-all-sources' setting
  - Don't block getting the IBus engines
  - Expand the default list of input sources
  + User Accounts:
  - Simplify some drawing code
  - Fix login keyring password not getting updated
  - Fix match icon not updating in some cases.
- Drop gnome-control-center-bgpanel.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1347451200">- Rebase gcc-private-connection.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Ensure that all sources are GPLv2+ instead of a mix of GPLv2+
    and GPLv3+.
  + Set blank window titles for a number of dialogues.
  + Fix accessible labels for switches.
  + Bluetooth:
  - Fix setting up dial-up networking for phones.
  + Display:
  - Fix mouse events not working in preview.
  + Background:
  - Use a more varied colour palette.
  - Fix the small size of the "changes throughout the day"
    emblem.
  + Network:
  - Mark all rows representing saved connections as such.
  - Make the 'Settings...' buttons work properly.
  - Handle disconnected APs better.
  - Show a "Connect" button for disconnected APs.
  - Show 'Last used' item for non-active, in-range access points.
  - Improve the Wi-Fi list appearance.
  + User Accounts:
  - Use GStreamer 1.0
  - Fix "enterpise" typo
  + Power:
  - Fix a wrong use of GCancellable that could lead to crashes.
  + Region:
  - Use consistent strings for layout/engine names.
  - Handle empty layout sources, especially when adding a new
    one.
  - Handle input sources in the system tab.
  - Fix layout problem on the system tab.
  - Update IBus engines whitelist.
  + Printers:
  - Fix building against CUPS 1.6.
  + Universal Access:
  - Fix whitespace in the zoom options dialogue.
  + Screen &amp; Brightness:
  - Make notification checkbox focusable.
  + Wacom:
  - Fix link to docs.
- Replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0) BuildRequires, due to upstream changes.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Network:
  - Make connecting to Enterprise WPA Wi-Fi networks work again.
  + Region:
  - Jump directly to the correct shortcuts section when following
    the link.
  + Shell:
  - Fix broken panels when launching the same one twice
  + User Accounts:
  - Don't ask for the old password when none is set.</changelog>
<changelog author="dimstar@opensuse.org" date="1348920000">- Really replace pkgconfig(gstreamer-0.10) BuildRequires with
  pkgconfig(gstreamer-1.0): cheese-devel already correctly pulled
  in gstreamer 1.0 devel files, so there is no factual change now.
  But it stops us from pulling in GStreamer 0.10 while we don't
  need it anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349956800">- Update to version 3.6.1:
  + Background:
  - Fix multi-monitor handling
  - Use a lighter texture for solid colours
  + Date &amp; Time:
  - Update the current time when we change the timezone
  + Mouse:
  - Fix mouse test area not being in the correct position in some
    cases
  + Network:
  - Fix arrow direction in RTL languages
  - Don't resize the panel or the Wi-Fi list
  - Top align the back button in the Wi-Fi panel
  - Fix parenting problems when spawing a network dialogue
  - Don't try to activate out-of-range connections
  - Fix WPA Enterprise connections not working
  - Use a regular button for "Connect to Hidden Network"
  + Online Accounts:
  - Fix a warning on exit
  + Printers:
  - Fix wrong icon being used in the search entry
  + Region &amp; Language:
  - Remove the unused "Remove" button
  - Reduce the number of required m17n desktop files
  - Repopulate the input sources when IBus becomes available
    again
  - Add support for inscript2 and Marathi phonetic input sources
  + Shell:
  - Fix entering the same panel twice
  + Sound:
  - Fix input level bar direction in RTL languages
  + User Accounts:
  - Fix the autologin icon not being recoloured.
- Rebase gcc-private-connection.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1351252800">- Update to version 3.6.2:
  + Background:
  - Fix crash when exiting panel too quickly.
  + Network:
  - Fix 8021x connections.
  + Screen:
  - Avoid accessing destroyed panel.
  + User accounts:
  - Complete discover on failure.
  - Recognize that some kerberos domains cannot be joined.
  - Remove the realmd version check.
  - Set timeouts on all realmd interface proxies.
  - Don't have domains twice in the drop down.
  - Fix wrong sensitivity of the autologin combo.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Don't own %{_datadir}/polkit-1/rules.d: it's owned (with special
  attr()) by polkit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Add F1 accelerator to show help.
  + Background: Hide in Unity.
  + Bluetooth:
  - Fix the master switch not following the actual adapter state.
  - Fix the Connection switch being in the wrong state when
    connecting fails.
  - Show a spinner when connecting to a device.
  - Align left hand pane with the "All Settings" button.
  + Keyboard: Show more specific help page
  + Network: Make Airplane mode switch off all the radios,
    including Bluetooth.
  + Online Accounts:
  - Don't preselect the first item when adding an account.
  - Align left hand pane with the "All Settings" button.
  + Printers:
  - Fix renaming printers with recent versions of CUPS.
  - Show in Unity.
  + Region: Fix possible crasher on startup.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1356609600">- Drop apg recommends: automatic password generatoion is no longer
  done by spawning apg, but rather by using libpwquality directly.</changelog>
<changelog author="idonmez@suse.com" date="1359460800">- Drop gnome-control-center-probe-radius-server-cert.patch for now.
  The patch is incomplete and breaks WPA-Enterprise completely
  (bnc#798793)</changelog>
<changelog author="dimstar@opensuse.org" date="1361880000">- Do not package gnome-control-center.rules (bnc#804966): On
  openSUSE defining the use of the wheel group is up to the
  administrator.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add use-gnome-settings-daemon-for-datetime.patch to fix the NTP
  toggle as timedated will remain broken in 12.3 (bnc#796055)
- Add pwquality-misuse.patch to fix rejection of some passwords of
  sufficient quality, and disallow acceptance of some passwords of
  insufficient quality (bnc#808539, bgo#691907)
- Add remove-password-hints.patch since gdm does not show password
  hints (bnc#796932, bgo#643445)
- Add remove-password-options.patch to remove 'choose password at
  next login' and 'login without password', both of which just
  lock the user account and could result in getting locked out of
  your own computer. This is temporary. (bnc#779408)
- Add gnome-control-center-show-generated-passwords.patch, it's
  wrong to initially hide the generated password as otherwise the
  user cannot know what it is (bnc#808540, bgo#688401)</changelog>

</package>
<package pkgid="d3e915ee87a58eb04177c1dfdc8b99636488c4362135689deab192fdccd30672" name="gnome-settings-daemon" arch="x86_64">
    <version epoch="0" ver="3.6.3" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1337083200">- Update to version 3.4.2:
  + General:
  - Fix memory leaks
  + Media-keys:
  - Fix applications launching through keyboard shortcuts not
    using the session's ssh agent, or keyrings
  + Mouse:
  - Fix arguments passed to the custom command
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Add gnome-settings-daemon-reduce-tap-delay.patch to reduce the
  delay between the last keystroke and the first touchpad tap when
  the option "Disable touchpad when typing" is enabled in mouse
  options in gnome-control-center (bgo#590783)
- Add gnome-settings-daemon-only-inhibit-touchpad-tapping.patch to
  inhibit only tapping and not affect pointer motion or scrolling
  using the touchpad when the option "Disable touchpad when
  typing" is enabled in mouse options in gnome-control-center
  (bgo#673055)
- Pass --libexecdir option to ./configure to change the
  installation dir of program executables to
  %{_libexecdir}/gnome-settings-daemon-3.0; fixes bnc#758592.</changelog>
<changelog author="dimstar@opensuse.org" date="1339243200">- Update to version 3.5.2:
  + Remove ability to D-Bus activate
  + Media keys:
  - Get proper gnome-keyring environment
  - Simplify the OSD code
  - Add keybindings to switch input sources
  + Mouse:
  - Fix applying settings to newly added touchpads
  - Reduce default touchpad deactivation to 1s
  + Housekeeping:
  - Split out 'ignore unix mount' code
  + Keyboard:
  - Always apply xmodmap
  - Lots of cleanups
  - Apply XKB layouts ourselfs and stop relying on libgnomekbd
  + Power:
  - Disconnect from upower signals when needed
  - Add org.gnome.settings-daemon.plugins.power.lid-close-
    suspend-with-extrnal-monitors
    key to allow forcing suspend on lid close
  + Print:
  - Fix setting of default media size
  - Don't create an unused proxy object
  - Speed up initialization
  + Updates:
  - Automatically download updates rather than installing them
  + Wacom:
  - Disable wacom support on s390
  - Disable wacom support on non-linux
  - Don't put touchscreens in relative mode
  - Make tablet configuration per-machine
  + Color:
  - Be quiet about unloadable profiles
  + Updated translations.
- Drop pkgconfig(libxklavier), pkgconfig(libgnomekbd) and
  pkgconfig(libgnomekbdui) BuildRequires.
- Add pkgconfig(xkbfile) BuildRequires: add upstream after
  libgnomekbd dependency got dropped.
- Drop gnome-settings-daemon-reduce-tap-delay.patch: fixed upstream
- Rebase gnome-settings-daemon-bnc462640-mute-action.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1340625600">- Update to version 3.5.3:
  + Housekeeping:
  - Support new XDG thumbnail directory locations
  + Keyboard A11y:
  - Don't crash when changing large print in fallback mode
  - Link to an existing help page
  + Keyboard:
  - Don't crash if LANG is empty
  + Media-keys:
  - Make &lt;Super&gt; keyboard shortcuts work again
  - Use systemd to shutdown or suspend if available
  + Mouse:
  - Only inhibits mouse clicks and scrolls with syndaemon
  + Power:
  - End the lid-close safety timer when the lid gets opened
  - Update fallback status icon on icon state change
  - Don't leak notifications
  - Avoid duplicate translations
  - Use systemd to shutdown or suspend if available
  - Don't enable backlight helper if GUdev is not available
  + Updates:
  - Adapt to new upstream property name
  - Add a notification for offline updates
  + Wacom:
  - Update display mapping on monitor changes
  - Flag unknown devices created from fallback
  - Add keep aspect ratio option
  - Use GnomeRROutput instead of GnomeRROutputInfo
  - Match built-in monitor
  + XRandr:
  - Explicitly set clone state variable when generating monitor
    configs.
- Drop gnome-settings-daemon-only-inhibit-touchpad-tapping.patch:
  fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 3.5.4:
  + Printers:
  - Don't block the session with unreachable printers
  + Wacom:
  - Fix crasher related to screen matching</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 3.5.5:
  + Add test applications for a number of plugins
  + Color:
  - Fix notification-related memory leaks
  + Housekeeping:
  - Fix notification-related memory leaks
  + Keyboard:
  - Add support for switching to IBus input methods
  + Updates:
  - Remove unused settings
  - Remove a number of unused notifications
  - Don't ever live-update packages in the session
  - Fix a number of memory leaks
  - Prevent crash if a device that requires a firmware is removed
    before the firmware search completes
  + Wacom:
  - Fix crasher related to screen tablets
  - Do not rotate "pad" devices
  - Apply display rotation to device that's mapped to it
  - Make shortcuts that require Shift work as expected
  - Re-apply calibration and aspect-ratio when the screen changes
    but don't apply it to touch devices.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Build:
  - Add optional man page.
  - List plugin schemas as children of the main schema.
  + Keyboard:
  - Require ibus 1.4.99 for ibus support.
  + Mouse:
  - If one device was ignored, we would ignore all the devices.
  + Smartcard:
  - Don't try to use smartcard drivers that didn't load.
  + Updates:
  - Remove unused code.
  - Avoid compilation warnings due to PackageKit API changes.
  + Wacom:
  - Avoid a warning at login.
- Add xsltproc BuildRequires: needed to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Keyboard:
  - Apply XKB options
  + Mouse:
  - Add support for natural scroll for touchpads
  + Power:
  - Fix D-Bus path of the screensaver
  + Wacom:
  - Implement the "switch monitor" combination
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Keyboard:
  - Don't handle IBus for fallback, it will use the same UI it
    always did.
  - Hook IBus support for legacy applications.
  + Mouse:
  - Fix natural-scroll not working until switched off and on
    again.
  + Power:
  - Do not attempt to change the brightness of an output that was
    disabled.
  - Fix idle blank and sleep timeout.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Add explicit pkgconfig(libpulse-mainloop-glib) BuildRequires:
  we forgot to add it when adding pkgconfig(libpulse).
- Add pkgconfig(xext) BuildRequires: new explicit dependency in
  3.5.5 for the power plugin that needs the XSync API.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Drop gnome-settings-daemon-bnc461755-randr-rotate-wacom.diff:
  this needed to be rebased for a long time, and there's a rocking
  support for wacom tablets upstream now. So this is most likely
  not needed anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Keyboard:
  - Don't block getting the IBus global engine.
  - Don't touch the XKB layout if no input sources were
    configured.
  - Fix gtk+ IM module getting set to IBus for XKB sources.
  + Media keys:
  - Make "toggle brightness" work.
  + Color:
  - Don't warn about non-existent DMI file.
  + Power:
  - Fix some instances where an external screen would turn off.
  + Wacom:
  - Require wacom 0.6 to fix bugs with some tablets.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Create sources from the X layouts if the configuration is empty
  + Always do that in GDM, so system-wide layouts work
  + Add modifiers-only shortcuts to switch input sources.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349870400">- Update to version 3.6.1:
  + Color:
  - Fix possible crashers on exit
  + Keyboard:
  - Allow grabbing the Menu key
  - Apply XKB variants and options for each IBus engine
  - Don't setup legacy toolkits if IBus is missing
  - Add default setup for some particular languages
  - Convert old libgnomekbd and IBus configurations
  - Add support for more modifiers only combinations
  - Fix input switching eating the modifiers keys in some cases
  + Mouse:
  - Fix "Locate Pointer" eating the Ctrl key
  - Fix "Locate Pointer" animation showing when the Ctrl key has
    been used
  + Updates:
  - Never show the user a message about cancelled transactions
  + Wacom:
  - Fix LEDs switching for some tablet models
  + Housekeeping:
  - Fix possible crashers on exit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352376000">- Update to version 3.6.2:
  + Make test applications work when libnotify was used.
  + Keyboard:
  - Add default ibus engine for Indic locales.
  - Prevent 100% CPU usage related to remembering Num-Lock state.
  - Don't print warning messages when resuming from suspend.
  + Power:
  - Fix screen dimming and power saving even when inhibited.
  - Don't suspend, dim or blank when running in virtual machines.
  - Fix warning output in the Brightness &amp; Lock panel.
  - Fix possible crash when the backlight fails to be turned off
    for example.
  + Sound:
  - Fix alert sound changes requiring a log out/login to apply.
  + Updates:
  - Don't require the user to click OK to clear the message for
    successful offline updates.
  + Wacom:
  - Fix touchstrips and touchrings without a modeswitch.
  + XSettings:
  - Make startup smoother by batching settings updates together.
- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Keyboard: Add keyboard shortcuts including CapsLock to switch
    input sources..
  + Mouse: Fix horizontal natural scrolling.
  + Power: Fix a warning on startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1358078400">- Add gnome-settings-daemon-notify-idle-resumed.patch, notify user
  about auto suspend when returning from sleep (bnc#708182).</changelog>
<changelog author="dimstar@opensuse.org" date="1358683200">- Add gnome-settings-daemon-double-suspend.patch: Fix double
  suspend: if GNOME is configured to suspend on lid close, the
  system goes directly back in sleep upon a wakeup call. Only the
  2nd wake up is successful and persistent. This issue comes from
  systemd and gnome both executing suspend.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add gnome-settings-daemon-restore-datetime-plugin.patch: needed
  for gnome-control-center to properly toggle NTP given that
  timedated is broken on openSUSE; needed until the corresponding
  gnome-control-center patch is removed (bnc#796055).</changelog>

</package>
<package pkgid="5a042afaf6cf138c7c017961d6f4b2749180f966954371a588c051b25ac3f712" name="gnome-settings-daemon-devel" arch="x86_64">
    <version epoch="0" ver="3.6.3" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1337083200">- Update to version 3.4.2:
  + General:
  - Fix memory leaks
  + Media-keys:
  - Fix applications launching through keyboard shortcuts not
    using the session's ssh agent, or keyrings
  + Mouse:
  - Fix arguments passed to the custom command
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Add gnome-settings-daemon-reduce-tap-delay.patch to reduce the
  delay between the last keystroke and the first touchpad tap when
  the option "Disable touchpad when typing" is enabled in mouse
  options in gnome-control-center (bgo#590783)
- Add gnome-settings-daemon-only-inhibit-touchpad-tapping.patch to
  inhibit only tapping and not affect pointer motion or scrolling
  using the touchpad when the option "Disable touchpad when
  typing" is enabled in mouse options in gnome-control-center
  (bgo#673055)
- Pass --libexecdir option to ./configure to change the
  installation dir of program executables to
  %{_libexecdir}/gnome-settings-daemon-3.0; fixes bnc#758592.</changelog>
<changelog author="dimstar@opensuse.org" date="1339243200">- Update to version 3.5.2:
  + Remove ability to D-Bus activate
  + Media keys:
  - Get proper gnome-keyring environment
  - Simplify the OSD code
  - Add keybindings to switch input sources
  + Mouse:
  - Fix applying settings to newly added touchpads
  - Reduce default touchpad deactivation to 1s
  + Housekeeping:
  - Split out 'ignore unix mount' code
  + Keyboard:
  - Always apply xmodmap
  - Lots of cleanups
  - Apply XKB layouts ourselfs and stop relying on libgnomekbd
  + Power:
  - Disconnect from upower signals when needed
  - Add org.gnome.settings-daemon.plugins.power.lid-close-
    suspend-with-extrnal-monitors
    key to allow forcing suspend on lid close
  + Print:
  - Fix setting of default media size
  - Don't create an unused proxy object
  - Speed up initialization
  + Updates:
  - Automatically download updates rather than installing them
  + Wacom:
  - Disable wacom support on s390
  - Disable wacom support on non-linux
  - Don't put touchscreens in relative mode
  - Make tablet configuration per-machine
  + Color:
  - Be quiet about unloadable profiles
  + Updated translations.
- Drop pkgconfig(libxklavier), pkgconfig(libgnomekbd) and
  pkgconfig(libgnomekbdui) BuildRequires.
- Add pkgconfig(xkbfile) BuildRequires: add upstream after
  libgnomekbd dependency got dropped.
- Drop gnome-settings-daemon-reduce-tap-delay.patch: fixed upstream
- Rebase gnome-settings-daemon-bnc462640-mute-action.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1340625600">- Update to version 3.5.3:
  + Housekeeping:
  - Support new XDG thumbnail directory locations
  + Keyboard A11y:
  - Don't crash when changing large print in fallback mode
  - Link to an existing help page
  + Keyboard:
  - Don't crash if LANG is empty
  + Media-keys:
  - Make &lt;Super&gt; keyboard shortcuts work again
  - Use systemd to shutdown or suspend if available
  + Mouse:
  - Only inhibits mouse clicks and scrolls with syndaemon
  + Power:
  - End the lid-close safety timer when the lid gets opened
  - Update fallback status icon on icon state change
  - Don't leak notifications
  - Avoid duplicate translations
  - Use systemd to shutdown or suspend if available
  - Don't enable backlight helper if GUdev is not available
  + Updates:
  - Adapt to new upstream property name
  - Add a notification for offline updates
  + Wacom:
  - Update display mapping on monitor changes
  - Flag unknown devices created from fallback
  - Add keep aspect ratio option
  - Use GnomeRROutput instead of GnomeRROutputInfo
  - Match built-in monitor
  + XRandr:
  - Explicitly set clone state variable when generating monitor
    configs.
- Drop gnome-settings-daemon-only-inhibit-touchpad-tapping.patch:
  fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 3.5.4:
  + Printers:
  - Don't block the session with unreachable printers
  + Wacom:
  - Fix crasher related to screen matching</changelog>
<changelog author="dimstar@opensuse.org" date="1342526400">- Update to version 3.5.5:
  + Add test applications for a number of plugins
  + Color:
  - Fix notification-related memory leaks
  + Housekeeping:
  - Fix notification-related memory leaks
  + Keyboard:
  - Add support for switching to IBus input methods
  + Updates:
  - Remove unused settings
  - Remove a number of unused notifications
  - Don't ever live-update packages in the session
  - Fix a number of memory leaks
  - Prevent crash if a device that requires a firmware is removed
    before the firmware search completes
  + Wacom:
  - Fix crasher related to screen tablets
  - Do not rotate "pad" devices
  - Apply display rotation to device that's mapped to it
  - Make shortcuts that require Shift work as expected
  - Re-apply calibration and aspect-ratio when the screen changes
    but don't apply it to touch devices.
- Add pkgconfig(ibus-1.0) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 3.5.6:
  + Build:
  - Add optional man page.
  - List plugin schemas as children of the main schema.
  + Keyboard:
  - Require ibus 1.4.99 for ibus support.
  + Mouse:
  - If one device was ignored, we would ignore all the devices.
  + Smartcard:
  - Don't try to use smartcard drivers that didn't load.
  + Updates:
  - Remove unused code.
  - Avoid compilation warnings due to PackageKit API changes.
  + Wacom:
  - Avoid a warning at login.
- Add xsltproc BuildRequires: needed to build the man pages.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 3.5.90:
  + Keyboard:
  - Apply XKB options
  + Mouse:
  - Add support for natural scroll for touchpads
  + Power:
  - Fix D-Bus path of the screensaver
  + Wacom:
  - Implement the "switch monitor" combination
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 3.5.91:
  + Keyboard:
  - Don't handle IBus for fallback, it will use the same UI it
    always did.
  - Hook IBus support for legacy applications.
  + Mouse:
  - Fix natural-scroll not working until switched off and on
    again.
  + Power:
  - Do not attempt to change the brightness of an output that was
    disabled.
  - Fix idle blank and sleep timeout.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Add explicit pkgconfig(libpulse-mainloop-glib) BuildRequires:
  we forgot to add it when adding pkgconfig(libpulse).
- Add pkgconfig(xext) BuildRequires: new explicit dependency in
  3.5.5 for the power plugin that needs the XSync API.</changelog>
<changelog author="vuntz@opensuse.org" date="1347105600">- Drop gnome-settings-daemon-bnc461755-randr-rotate-wacom.diff:
  this needed to be rebased for a long time, and there's a rocking
  support for wacom tablets upstream now. So this is most likely
  not needed anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Keyboard:
  - Don't block getting the IBus global engine.
  - Don't touch the XKB layout if no input sources were
    configured.
  - Fix gtk+ IM module getting set to IBus for XKB sources.
  + Media keys:
  - Make "toggle brightness" work.
  + Color:
  - Don't warn about non-existent DMI file.
  + Power:
  - Fix some instances where an external screen would turn off.
  + Wacom:
  - Require wacom 0.6 to fix bugs with some tablets.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Create sources from the X layouts if the configuration is empty
  + Always do that in GDM, so system-wide layouts work
  + Add modifiers-only shortcuts to switch input sources.</changelog>
<changelog author="dimstar@opensuse.org" date="1349179200">- Add with_ibus condition (currently set to 0), as we do not have
  a recent enough version of IBus in Factory at this moment.
  + when with_ibus is set to 1; pkconfig(ibus) BuildRequires will
    be used and --enable-ibus is being passed to configure
  + when with_ibus is set to 0, pkgconfigu(ibus) is being ignored
    and --disable-ibus is being passed to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1349870400">- Update to version 3.6.1:
  + Color:
  - Fix possible crashers on exit
  + Keyboard:
  - Allow grabbing the Menu key
  - Apply XKB variants and options for each IBus engine
  - Don't setup legacy toolkits if IBus is missing
  - Add default setup for some particular languages
  - Convert old libgnomekbd and IBus configurations
  - Add support for more modifiers only combinations
  - Fix input switching eating the modifiers keys in some cases
  + Mouse:
  - Fix "Locate Pointer" eating the Ctrl key
  - Fix "Locate Pointer" animation showing when the Ctrl key has
    been used
  + Updates:
  - Never show the user a message about cancelled transactions
  + Wacom:
  - Fix LEDs switching for some tablet models
  + Housekeeping:
  - Fix possible crashers on exit.</changelog>
<changelog author="dimstar@opensuse.org" date="1352376000">- Update to version 3.6.2:
  + Make test applications work when libnotify was used.
  + Keyboard:
  - Add default ibus engine for Indic locales.
  - Prevent 100% CPU usage related to remembering Num-Lock state.
  - Don't print warning messages when resuming from suspend.
  + Power:
  - Fix screen dimming and power saving even when inhibited.
  - Don't suspend, dim or blank when running in virtual machines.
  - Fix warning output in the Brightness &amp; Lock panel.
  - Fix possible crash when the backlight fails to be turned off
    for example.
  + Sound:
  - Fix alert sound changes requiring a log out/login to apply.
  + Updates:
  - Don't require the user to click OK to clear the message for
    successful offline updates.
  + Wacom:
  - Fix touchstrips and touchrings without a modeswitch.
  + XSettings:
  - Make startup smoother by batching settings updates together.
- Change with_systemd defines to 1 in order to enable systemd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 3.6.3:
  + Keyboard: Add keyboard shortcuts including CapsLock to switch
    input sources..
  + Mouse: Fix horizontal natural scrolling.
  + Power: Fix a warning on startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1358078400">- Add gnome-settings-daemon-notify-idle-resumed.patch, notify user
  about auto suspend when returning from sleep (bnc#708182).</changelog>
<changelog author="dimstar@opensuse.org" date="1358683200">- Add gnome-settings-daemon-double-suspend.patch: Fix double
  suspend: if GNOME is configured to suspend on lid close, the
  system goes directly back in sleep upon a wakeup call. Only the
  2nd wake up is successful and persistent. This issue comes from
  systemd and gnome both executing suspend.</changelog>
<changelog author="mike.catanzaro@gmail.com" date="1362830400">- Add gnome-settings-daemon-restore-datetime-plugin.patch: needed
  for gnome-control-center to properly toggle NTP given that
  timedated is broken on openSUSE; needed until the corresponding
  gnome-control-center patch is removed (bnc#796055).</changelog>

</package>
<package pkgid="2d888a22c92b98cabb387e4dc895ffe93876048a37fc6e032871de4ca6d2d120" name="nagios-nsca-client" arch="x86_64">
    <version epoch="0" ver="2.9.1" rel="5.4.1"/>

<changelog author="tsieden@suse.de" date="1165492800">- package split: nagios-nsca for the server and
  nagios-nsca-client for the remote host
- removed unneeded BuildRequires (nagios)</changelog>
<changelog author="tsieden@suse.de" date="1170072000">- update to version 2.7
  * Fixed crash from malformed command line
    (therefore removed removed nagios-nsca.send_nsca.formatstring.patch)
  * Updated to config.sub and config.guess to latest from GNU Savannah
  * changed default user and group to nagios nagios (#236135)</changelog>
<changelog author="tsieden@suse.de" date="1171022400">- update to version 2.7.1
  * Fixed bug that prevented single mode daemon from working properly
  * Added sample scripts for testing functionality to nsca_tests/
    (Ton Voon/Altinity)</changelog>
<changelog author="tsieden@suse.de" date="1187006400">- update to version 2.7.2
  * fixed bug with NSCA daemon eating CPU if child process
  couldn't accept a connection in multi-process mode (Chris Wilson)</changelog>
<changelog author="tsieden@suse.de" date="1188561600">- cleanup spec file (removed unneeded %dir entry)</changelog>
<changelog author="schneemann@b1-systems.de" date="1320926400">- update to version 2.9
  * Add config directive to submit directly to checkresults directory (Mike Lindsey)
  * Support multi-line check output with 4000 character limit (Mike Lindsey)
- fixes in skipped version 2.8
  * Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki)
  * Fixed bug where daemon would segfault if mcrypt library was not initialized before timeout (Holger Weiss)
  * Fixed bug with switching from dump file to command file when running under single mode (Ton Voon)
  * Fix for small memory leak with running as a single process daemon (Daniel)</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="lars@linux-schulserver.de" date="1328270400">- update to 2.9.1:
  + Applied patch to allow packets arriving with a future time stamp
    (Daniel Wittenberg)
  + Updated server (nsca) to allow packets with older, smaller
    packet size (Eric Stanley)
- use macros from nagios-rpm-macros package
- added rpmlintrc</changelog>
<changelog author="lars@linux-schulserver.de" date="1349956800">- recommend 'monitoring_daemon' to allow nsca to run with
  compatible monitoring solutions</changelog>
<changelog author="lars@linux-schulserver.de" date="1363262400">- added man pages for nsca and send_nsca (fixes bnc#804614)</changelog>

</package>
<package pkgid="b560c08838720915ace02b1ad725ce5694bf15ffd2aa45110752e36b8cbea3d5" name="kdebase4-openSUSE" arch="x86_64">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="26f3e0df7dec58cfcffc0d23b484af71d2b71d08706eee30deac2beffdf9dbeb" name="kdebase4-runtime-branding-openSUSE" arch="x86_64">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="611c6b620e79a53c84cb6759c6fb20b2142b13ddcf68484962567ce32ec4cd59" name="kdebase4-workspace-branding-openSUSE" arch="x86_64">
    <version epoch="0" ver="12.3" rel="10.11.3"/>

<changelog author="tittiatcoke@gmail.com" date="1356868800">- Link to userbase instead of http://help.opensuse.org/kde4/ which
  is totally outdated. "Fixes" bnc#774509
  Patch created by Christian Trippe</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357128000">- Updates
  * Minor improvement to the plasma theme
  * Added dark colorscheme
  * Update oxygen glow color</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357732800">- Updates
  * Make the Plasma theme slightly more transparant
  * Updated systray icons for konversation and device notifier
  * Change opaque for the shutdown dialog</changelog>
<changelog author="ctrippe@opensuse.org" date="1358078400">- added patch (remove_sysinfo_from_cmake.diff) to remove
  kio_sysinfo and replace with kinfocenter.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358337600">- Updated the KDE Greeter with its new theme.
- Remove patch (remove_sysinfo_from_cmake.diff). Now coming from
  upstream.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Adjusted close button on the greeter so that it sits within the
  window</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Replace sysinfo icon by kinfocentre if exists</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358596800">- Updated greeter text
- Actually delete the patch file (remove_sysinfo_from_cmake.diff)
  from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856000">- Adjustments to the KDE Greeter
  * Add video button
  * change the name of the window from SUSE to openSUSE</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359201600">- Added kconf scripts for clearing the plasma cache</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Plasma theme:
  * Additional and updated systray icons
- Greeter:
  * Ensure that Firefox is playing the video (due to webm format)
  * Translation updates (not complete yet)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359374400">- Correct the section headers to be in the right order.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359979200">- Update KDE theme
  * Fix Clock Color
  * Fix composited, but not-blurred version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360065600">- Ensure that the new nepomuk-fileindexer is switched off by
  default</changelog>
<changelog author="coolo@suse.com" date="1360238400">- remove the video</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360324800">- remove superfluous '+' in krunnerrc, caused error messages
  when starting krunner (Thanks to wbauer@tmo.at)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360497600">- Make colorscheme tooltip colors the same as plasma theme colors
- Fix folderview popups (bnc#802940)
- Fix opaque widgets not able to resize (bnc#802978)
- Reduce the theme size, and make rpmlint more happy with making
  appropriate symlinks
- Remove references to video
- Fix different icons for greeter (bnc#802705)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361188800">- Minor updates
  Reasoning for the change:
  http://userbase.kde.org/Desktop_Effects_Performance#Qt_Graphics_System
  * Last touches for the plasma-theme:
  * Added: phone, lazy eyes and activities icons
  * Improved contrast for widget icons
  * Adjust Lancelot background for modern times
  * Fixed scrollbar as per bnc#803437
  * Slighty tweak dialog/panel svg, so notifications don't get cut
    off (mostly noticeable when new mail arrives in multiple folders)</changelog>
<changelog author="wstephenson@suse.com" date="1362139200">- Update Activities icon
- Remove unnecessary hardcoding of Nepomuk db location
- Correct Lancelot background theming
- Disable Windowed Widgets KRunner by default</changelog>
<changelog author="wbauer@tmo.at" date="1362657600">- fix typo in nepomukserverrc</changelog>

</package>
<package pkgid="b953585883f85b386af14d4e6d1a6ad92fb66899e4807802714c2632ea93b5b4" name="libpulse-devel" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="e0557f3e889a22b304d0a142c2b8c4a968773cba3cd940e001323f495bde4f51" name="libpulse-mainloop-glib0" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="473fe43404fa7d6ceb08c9edf6d0bca8acef32d5c28951c727be0f53620dcaf1" name="libpulse-mainloop-glib0-32bit" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="45eac1232d2c3d6f33029103770a2af61349970c316d029e7c1ceb72d1663529" name="libpulse0" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="5e4a8e1ebad0298a63a0d7959371475ea648bf9f08d3b6cdec60e4d9b5116bb9" name="libpulse0-32bit" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="1a574ae79462e177ab16b328bc9dcb27caa7f141900fec1b1e181f9f68a0060e" name="open-iscsi" arch="x86_64">
    <version epoch="0" ver="2.0.870" rel="47.4.1"/>

<changelog author="hare@suse.de" date="1228219200">- iscsiadm -m fw crashes on ppc (bnc#449116)</changelog>
<changelog author="hare@suse.de" date="1228478400">- Fixup 'onboot' for loginall (bnc#449108)
- Remove unused 'dump_char' definition in log.c
- Load ibft module before reading /sys/firmware (bnc#450897)</changelog>
<changelog author="hare@suse.de" date="1228737600">- Remove trailing tilde from /etc/iscsi/ifaces.example (bnc#450870)</changelog>
<changelog author="ro@suse.de" date="1232971200">- change fillup call from "-Y" to "-y" the boot script has
  been present in this package for long enough (SLES10-GA)</changelog>
<changelog author="crrodriguez@suse.de" date="1245585600">- build with fno-strict-aliasing
- do not use static libc, this does not work in reality, use
  of getaddrinfo(3) requires shared libraries at runtime</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="mmarek@suse.cz" date="1268395200">- Do not hardcode the iscsi_ibft module in the iscsi mkinitrd
  script, the ibft script handles this correctly (bnc#528657).</changelog>
<changelog author="aj@suse.de" date="1307361600">- Fix build with newer glibc.</changelog>
<changelog author="aj@suse.de" date="1319716800">- Rename init scripts (bnc#661401).</changelog>
<changelog author="lduncan@suse.com" date="1363262400">- Add open-iscsi-support-non-root-boot-volume.patch: handle non-
  root boot-time iscsi volumes (bnc#630434)
- Add open-iscsi-fix-sysfs-get-value-null.patch: accept "(null)"
  password as meaning no password, when using sysfs (bnc#766300)</changelog>

</package>
<package pkgid="9008fb5ee0210892aeb0a628d6d5a9d896f598811b37b049f7f3cd56241a4cff" name="pulseaudio" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="0f84807ba8485330ca9ab59311ebed1a42d47ce942fa04da1aa899710c4f375e" name="pulseaudio-esound-compat" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="7869bc2b016831920b91ee2037668de74fd1619dae62c3f05cfdff96c8fed22e" name="pulseaudio-gdm-hooks" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="1a5d4577a84c5f367dbb83c327554861d3c9bb59dc94ce99255484b53959d316" name="pulseaudio-module-bluetooth" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="059399202d969cce7f5b41e4131b02b7156f98969de907a70f34801a8f0a8359" name="pulseaudio-module-gconf" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="ebe8a2ac2b5979fa0ef7eff027bbff82ca93d5bd9a1742593733e2387ebd9353" name="pulseaudio-module-jack" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="d81f56319d7025df0dc953406dbb4bcba9eb4b75c0131289b273dd137336d957" name="pulseaudio-module-lirc" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="db2544dca6cb266910be3a68b2ea633855aad956ac31b1c57620fb75e1d57e4f" name="pulseaudio-module-x11" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="903c099cbd29ec2dc6e240e797e4b681061a061e8803ae3d9a36078d5782387c" name="pulseaudio-module-zeroconf" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="5ec1b20a1081b0d95cf4aedfbc539039b1dd53225e92c2b101e0e3c4ceb29864" name="pulseaudio-utils" arch="x86_64">
    <version epoch="0" ver="3.0" rel="1.6.1"/>

<changelog author="wstephenson@suse.com" date="1319198400">- Update to version 1.1:
  + Reintroduce a 3 point version string in various API calls,
    fixing PulseAudio with Skype.
  + Fix some linking errors that accidentally linked libpulse to
    libpulsecore which could under some circumstance "downgrade"
    libpulse to GPL (rather than LGPL) which could in turn cause
    problems with non-GPL compatible apps which link to libpulse.
  + Fix a problem where starting PA without X11 would fail due to
    dbus problems.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size argument in memset call</changelog>
<changelog author="reddwarf@opensuse.org" date="1326369600">- Remove libatomic-ops-devel buildrequires since it has been
  dropped from Factory (for x86/x86-64 it wasn't being used
  anyway)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1329480000">- add pulseaudio-remove_broken_assert.patch to remove a broken assert that
  makes pulseaudio crash when playing audio from Firefox when having to
  resample, especially in combination with the jack sink
- add libcap-devel build dependency for capabilities support
- add fftw3-devel build dependency for builtin equalizer support
- add orc build dependency for better performance</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1337428800">- update to 2.0:
  + Alternate sample rates.
  + Jack detection.
  + Echo cancellation: WebRTC canceller, automatic gain control,
    drift compensation.
  + Virtual Surround module.
  + Xen Paravirtualised audio sink.
  + Fixed HURD support.
  + A2DP decoder quality improvements.
- Add new BuildRequires: libwebrtc_audio_processing-devel,
  BuildRequires:  gcc-c++ and if SuSE-Release &gt;= 12.1
  BuildRequires:  systemd-devel
- Drop pulseaudio-remove_broken_assert.patch, fixed upstream.
- Futureproof spec for soname changes.</changelog>
<changelog author="tiwai@suse.de" date="1338292800">- Add the setup for SoX to setup-pulseaudio script</changelog>
<changelog author="tiwai@suse.de" date="1338379200">- Kill leftover PA processes when disabled via setup-pulseaudio
- Set up gstreamer audiosink/src in setup-pulseaudio script, too</changelog>
<changelog author="idonmez@suse.com" date="1338811200">- Remove rpmlintrc, we can't use setBadness for Factory</changelog>
<changelog author="tiwai@suse.de" date="1338984000">- Add the proper exit codes to setup-pulseaudio script
  (for avoiding the errors during installation, too)</changelog>
<changelog author="tiwai@suse.de" date="1340020800">- Add kmix setup to setup-pulseaudio script</changelog>
<changelog author="zaitor@opensuse.org" date="1342872000">- Update to version 2.1:
  + Actually build libwebrtc-util.
  + Various bugfixes.</changelog>
<changelog author="tiwai@suse.de" date="1346932800">- Fix the broken setup by setup-pulseaudio when alsa-plugins-pulse
  doesn't exist (bnc#779039)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd through pkgconfig provides to remove cycle</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- Place udev rules in the proper place</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352980800">- Enable systemd integration (following the distribution):
  + Add systemd-devel BuildRequires.
  + Pass --enable-systemd to configure.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353153600">- disable all HAL compat/support since it is long gone.</changelog>
<changelog author="tiwai@suse.de" date="1354017600">- Add the audio setup for qemu/kvm to setup-pulseaudio script
  (bnc#737070)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1356955200">- Update to pulseaudio 3.0 (bnc#799737 and bnc#800656)
  * ALSA Use Case Manager (UCM) support
  * Runtime editable LADSPA filter parameters
  * Out-of-the-box support for Bluetooth sources
  * Configurable device latency offset
  * Various ALSA changes
  * Lots of infrastructure improvements</changelog>
<changelog author="oholecek@suse.com" date="1358683200">- bluetooth module now requires Bluez &gt; 4.99</changelog>
<changelog author="tiwai@suse.de" date="1362744000">- Fix a bug setting speaker volume to zero wrongly (bnc#805865):
  pulseaudio-alsa-speaker-zero-vol-fix.patch</changelog>

</package>
<package pkgid="64d17ccaf45753f0373bf2d4df381efabf3332a432260eeef7ed1a26481cefd6" name="firebird" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="673416d97a344d7ef6c5ef2c3bd42439c8ac2686e7cadba02a33c150bd0e60a6" name="firebird-classic" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="09be5fa9eac0cf28f1324796400c9ed61b8e663fe50bc0a6f2ba0202910652c0" name="firebird-devel" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="ba20c6b445aaaa5713377413a3fcf3ed2209bfd8fc8e837e5d7e590a205d9a8f" name="firebird-superserver" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="49640fb8e48639453b7731a6084b6524801677d8980417f22d42e431d6926f57" name="krb5" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="0c9f1f730a51d1e82a4bace0c62dcb23e65da432e0e1429a6744eb7c8f569306" name="krb5-client" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="53338e9627dcc600d830a02f3675953279bf45fd7fc44084d3e880394d9ea36a" name="krb5-devel" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="67ac26b8d1c5e18a3644f81409e57e12017231af56e159e09e506faba780ab58" name="krb5-mini" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="c974c5e4a4c24d1409eed3201de5d3f05ce21a1f237b709019fe9a095b4186ae" name="krb5-mini-devel" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="39fabed17a0912fc19e3316450849bf4c1759a600d80223fba88878232ab9b19" name="krb5-plugin-kdb-ldap" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="ad5e132ba616d26bf00dff99a14161e9a251f4a8846ee726987bc807aeadd11f" name="krb5-plugin-preauth-pkinit" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="5a5ca91a450a9821204b8366ce62d738b11a3b1b2de50688a432343e005dd38a" name="krb5-server" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="5fcc0dfbe9d0192c970fbb9a36a8ac3e1279bac4e9a71ceaccf5f2ca53feceb7" name="libfbclient2" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="ea9508f1606fcb05067836cff0cc81d764d91c7853c6d81d44e00c16c3e906dc" name="libfbclient2-devel" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="9d81b321d90c1638d9e9fad2e9e25e9bde51ca7e0d3277f7533f25de4572b823" name="libfbembed-devel" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="49f721a2133ad7a3fb7746a0096be29f919abc96b03bf7214bef7a5572941c97" name="libfbembed2_5" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="73c397ead79225303339981ac9ecc382d6ca67c79191e47876b31333504557cd" name="perl" arch="x86_64">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="56074f14eb5bde819d49ff2d624d4b6b600f1c0db832d89d17d2416776f06761" name="perl-base" arch="x86_64">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="19259163cf958de85028d800bf516cf7361ef4d0d677e2146fe9a77e4f935902" name="sudo" arch="x86_64">
    <version epoch="0" ver="1.8.6p3" rel="3.5.1"/>

<changelog author="puzel@novell.com" date="1275480000">- add sudo-CVE-2010-1646.patch (bnc#594738)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1276603200">- update to 1.7.2p7:
  * portability fixes
- changes from 1.7.2p6:
  * Handle duplicate variables in the environment
  * visudo: fix a crash when checking a sudoers file that has aliases
    that reference themselves
  * aliases: fix use after free in error message when a duplicate
    alias exists
  * visudo: prevent NULL dereference in printf()
- removed sudo-CVE-2010-1163.patch (merged upstream)
- removed sudo-CVE-2010-1646.patch (merged upstream)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1294920000">- add sudo-CVE-2011-0010.patch (bnc#663881)</changelog>
<changelog author="cprause@novell.com" date="1296129600">- added openldap schema file (bnc#667558)</changelog>
<changelog author="puzel@novell.com" date="1300363200">- update to sudo-1.8.0
  * Sudo has been refactored to use a modular framework that can
    support third-party policy and I/O logging plugins.
  * Defaults settings that are tied to a user, host or command may
    now include the negation operator. For example:
    Defaults:!millert lecture
    will match any user but millert.
  * The default PATH environment variable, used when no PATH
    variable exists, now includes /usr/sbin and /sbin.
  * Support for logging I/O for the command being run.
  * Sudo will now use the Linux audit system.
  + See /usr/share/doc/packages/sudo/NEWS for full list
- new configure script flags: enable-warnings, with-linux-audit,
  docdir, with-sendmail
- BuildRequires += audit-devel
- BuildRequires -= postfix
- PreReq += permissions
- add sudo-dont-ignore-LDFLAGS.patch
- drop sudo-1.7.1-defaults.diff (insults disabled in sudoers)
- drop sudo-1.7.1-__P.diff (no more __P in sudo sources)
- drop sudo-1.7.1-strip.diff (sudo no longer strips binaries)
- drop sudo-CVE-2011-0010.patch (in upstream)
- drop sudo-1.7.1-secure_path.diff (sudo now adds /sbin and
  /usr/sbin to $PATH if it is empty)
- drop sudo-1.7.1-pam_rhost.diff (fixed in upstream)
- sudo-1.7.1-sudoers.diff renamed to sudo-sudoers.patch
- sudo-1.7.1-env.diff renamed to sudoers2ldif-env.patch
- do not package *.pod files
- use %verifyscript
- timestamp directory moved from /var/run/sudo to /var/lib/sudo
- better commented default /etc/sudoers
- packaged /etc/sudoers.d directory
- new sudo-devel subpackage
- cleaned specfile</changelog>
<changelog author="puzel@novell.com" date="1305892800">- update to sudo-1.8.1p2
  - Two-character CIDR-style IPv4 netmasks are now matched
    correctly in the sudoers file.
  - A non-existent includedir is now treated the same as an empty
    directory and not reported as an error.
  - Removed extraneous parens in LDAP filter when
    sudoers_search_filter is enabled that can cause an LDAP search
    error.
  - A new LDAP setting, sudoers_search_filter, has been added to
    ldap.conf.  This setting can be used to restrict the set of
    records returned by the LDAP query.  Based on changes from
    Matthew Thomas.
  - White space is now permitted within a User_List when used in
    conjunction with a per-user Defaults definition.
  - A group ID (%#gid) may now be specified in a User_List or
    Runas_List.  Likewise, for non-Unix groups the syntax is
    %:#gid.
  - Support for double-quoted words in the sudoers file has been
    fixed.  The change in 1.7.5 for escaping the double quote
    character caused the double quoting to only be available at the
    beginning of an entry.
  - The fix for resuming a suspended shell in 1.7.5 caused problems
    with resuming non-shells on Linux.  Sudo will now save the
    process group ID of the program it is running on suspend and
    restore it when resuming, which fixes both problems.
  - A bug that could result in corrupted output in "sudo -l" has
    been fixed.
  - Sudo will now create an entry in the utmp (or utmpx) file when
    allocating a pseudo-tty (e.g. when logging I/O).  The
    "set_utmp" and "utmp_runas" sudoers file options can be used to
    control this.  Other policy plugins may use the "set_utmp" and
    "utmp_user" entries in the command_info list.
  - The sudoreplay utility now supports arbitrary session IDs.
    Previously, it would only work with the base-36 session IDs
    that the sudoers plugin uses by default.
  - Sudo now passes "run_shell=true" to the policy plugin in the
    settings list when sudo's -s command line option is specified.
    The sudoers policy plugin uses this to implement the "set_home"
    sudoers option which was missing from sudo 1.8.0.
  - The "noexec" functionality has been moved out of the sudoers
    policy plugin and into the sudo front-end, which matches the
    behavior documented in the plugin writer's guide.  As a result,
    the path to the noexec file is now specified in the sudo.conf
    file instead of the sudoers file.
  - The exit values for "sudo -l", "sudo -v" and "sudo -l command"
    have been fixed in the sudoers policy plugin.
  - Sudo now parses command line arguments before loading any
    plugins.  This allows "sudo -V" or "sudo -h" to work even if
    there is a problem with sudo.conf
- drop sudo-dont-ignore-LDFLAGS.patch (merged upstream)</changelog>
<changelog author="prusnak@opensuse.org" date="1318507200">- updated to sudo-1.8.2
  * Sudo, visudo, sudoreplay and the sudoers plug-in now have natural
    language support (NLS). This can be disabled by passing configure
    the --disable-nls option.  Sudo will use gettext(), if available,
    to display translated messages.  All translations are coordinated
    via The Translation Project, http://translationproject.org/.
  * Plug-ins are now loaded with the RTLD_GLOBAL flag instead of
    RTLD_LOCAL.  This fixes missing symbol problems in PAM modules
    on certain platforms, such as FreeBSD and SuSE Linux Enterprise.
  * I/O logging is now supported for commands run in background mode
    (using sudo's -b flag).
  * Group ownership of the sudoers file is now only enforced when
    the file mode on sudoers allows group readability or writability.
  * Visudo now checks the contents of an alias and warns about cycles
    when the alias is expanded.
  * If the user specifes a group via sudo's -g option that matches
    the target user's group in the password database, it is now
    allowed even if no groups are present in the Runas_Spec.
  * The sudo Makefiles now have more complete dependencies which are
    automatically generated instead of being maintained manually.
  * The "use_pty" sudoers option is now correctly passed back to the
    sudo front end.  This was missing in previous versions of sudo
    1.8 which prevented "use_pty" from being honored.
  * "sudo -i command" now works correctly with the bash version
    2.0 and higher.  Previously, the .bash_profile would not be
    sourced prior to running the command unless bash was built with
    NON_INTERACTIVE_LOGIN_SHELLS defined.
  * When matching groups in the sudoers file, sudo will now match
    based on the name of the group instead of the group ID. This can
    substantially reduce the number of group lookups for sudoers
    files that contain a large number of groups.
  * Multi-factor authentication is now supported on AIX.
  * Added support for non-RFC 4517 compliant LDAP servers that require
    that seconds be present in a timestamp, such as Tivoli Directory Server.
  * If the group vector is to be preserved, the PATH search for the
    command is now done with the user's original group vector.
  * For LDAP-based sudoers, the "runas_default" sudoOption now works
    properly in a sudoRole that contains a sudoCommand.
  * Spaces in command line arguments for "sudo -s" and "sudo -i" are
    now escaped with a backslash when checking the security policy.
- added missing include (grp-include.patch)</changelog>
<changelog author="vcizek@suse.com" date="1319457600">- update to sudo-1.8.3
  - Fixed expansion of strftime() escape sequences
    in the log_dir sudoers setting.
  - Esperanto, Italian and Japanese
    translations from translationproject.org.
  - Added --enable-werror configure option for gcc's
  - Werror flag.  - Visudo no longer
    assumes all editors support the +linenumber command line argument.
    It now uses a whitelist of editors known to support the option.
  - Fixed matching of network addresses when a netmask is specified but
    the address is not the first one in the CIDR block.
  - The configure script now check whether or not errno.h declares the
    errno variable. Previously, sudo would always declare errno itself
    for older systems that don't declare it in errno.h.
  - The NOPASSWD tag is now honored for denied commands too,
    which matches historic sudo behavior (prior to sudo 1.7.0).
  - Sudo now honors the DEREF
    setting in ldap.conf which controls how alias dereferencing is done
    during an LDAP search.
  - A symbol conflict with the
    pam_ssh_agent_auth PAM module that would cause a crash been
    resolved.
  - The inability to load a group provider plugin is no
    longer a fatal error.
  - A potential crash in the utmp handling
    code has been fixed.
  - Two PAM session issues have been resolved.
    In previous versions of sudo, the PAM session was opened as one
    user and closed as another. Additionally, if no authentication was
    performed, the PAM session would never be closed.
  - The LOGNAME,
    USER and USERNAME environment variables are preserved correctly
    again in sudoedit mode.
- grp-include.patch no longer needed</changelog>
<changelog author="aj@suse.de" date="1325073600">- Set timedir correctly</changelog>
<changelog author="vcizek@suse.com" date="1325678400">- update to sudo-1.8.3p1
  * Fixed a crash in the monitor process on Solaris when NOPASSWD
    was specified or when authentication was disabled.
  * Fixed matching of a Runas_Alias in the group section of a Runas_Spec.</changelog>
<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>

</package>
<package pkgid="fe02e7fa9de25d7222a05d4c9a1a1766e8ff3abc161ea50a919145da95239992" name="sudo-devel" arch="x86_64">
    <version epoch="0" ver="1.8.6p3" rel="3.5.1"/>

<changelog author="puzel@novell.com" date="1275480000">- add sudo-CVE-2010-1646.patch (bnc#594738)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1276603200">- update to 1.7.2p7:
  * portability fixes
- changes from 1.7.2p6:
  * Handle duplicate variables in the environment
  * visudo: fix a crash when checking a sudoers file that has aliases
    that reference themselves
  * aliases: fix use after free in error message when a duplicate
    alias exists
  * visudo: prevent NULL dereference in printf()
- removed sudo-CVE-2010-1163.patch (merged upstream)
- removed sudo-CVE-2010-1646.patch (merged upstream)</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1294920000">- add sudo-CVE-2011-0010.patch (bnc#663881)</changelog>
<changelog author="cprause@novell.com" date="1296129600">- added openldap schema file (bnc#667558)</changelog>
<changelog author="puzel@novell.com" date="1300363200">- update to sudo-1.8.0
  * Sudo has been refactored to use a modular framework that can
    support third-party policy and I/O logging plugins.
  * Defaults settings that are tied to a user, host or command may
    now include the negation operator. For example:
    Defaults:!millert lecture
    will match any user but millert.
  * The default PATH environment variable, used when no PATH
    variable exists, now includes /usr/sbin and /sbin.
  * Support for logging I/O for the command being run.
  * Sudo will now use the Linux audit system.
  + See /usr/share/doc/packages/sudo/NEWS for full list
- new configure script flags: enable-warnings, with-linux-audit,
  docdir, with-sendmail
- BuildRequires += audit-devel
- BuildRequires -= postfix
- PreReq += permissions
- add sudo-dont-ignore-LDFLAGS.patch
- drop sudo-1.7.1-defaults.diff (insults disabled in sudoers)
- drop sudo-1.7.1-__P.diff (no more __P in sudo sources)
- drop sudo-1.7.1-strip.diff (sudo no longer strips binaries)
- drop sudo-CVE-2011-0010.patch (in upstream)
- drop sudo-1.7.1-secure_path.diff (sudo now adds /sbin and
  /usr/sbin to $PATH if it is empty)
- drop sudo-1.7.1-pam_rhost.diff (fixed in upstream)
- sudo-1.7.1-sudoers.diff renamed to sudo-sudoers.patch
- sudo-1.7.1-env.diff renamed to sudoers2ldif-env.patch
- do not package *.pod files
- use %verifyscript
- timestamp directory moved from /var/run/sudo to /var/lib/sudo
- better commented default /etc/sudoers
- packaged /etc/sudoers.d directory
- new sudo-devel subpackage
- cleaned specfile</changelog>
<changelog author="puzel@novell.com" date="1305892800">- update to sudo-1.8.1p2
  - Two-character CIDR-style IPv4 netmasks are now matched
    correctly in the sudoers file.
  - A non-existent includedir is now treated the same as an empty
    directory and not reported as an error.
  - Removed extraneous parens in LDAP filter when
    sudoers_search_filter is enabled that can cause an LDAP search
    error.
  - A new LDAP setting, sudoers_search_filter, has been added to
    ldap.conf.  This setting can be used to restrict the set of
    records returned by the LDAP query.  Based on changes from
    Matthew Thomas.
  - White space is now permitted within a User_List when used in
    conjunction with a per-user Defaults definition.
  - A group ID (%#gid) may now be specified in a User_List or
    Runas_List.  Likewise, for non-Unix groups the syntax is
    %:#gid.
  - Support for double-quoted words in the sudoers file has been
    fixed.  The change in 1.7.5 for escaping the double quote
    character caused the double quoting to only be available at the
    beginning of an entry.
  - The fix for resuming a suspended shell in 1.7.5 caused problems
    with resuming non-shells on Linux.  Sudo will now save the
    process group ID of the program it is running on suspend and
    restore it when resuming, which fixes both problems.
  - A bug that could result in corrupted output in "sudo -l" has
    been fixed.
  - Sudo will now create an entry in the utmp (or utmpx) file when
    allocating a pseudo-tty (e.g. when logging I/O).  The
    "set_utmp" and "utmp_runas" sudoers file options can be used to
    control this.  Other policy plugins may use the "set_utmp" and
    "utmp_user" entries in the command_info list.
  - The sudoreplay utility now supports arbitrary session IDs.
    Previously, it would only work with the base-36 session IDs
    that the sudoers plugin uses by default.
  - Sudo now passes "run_shell=true" to the policy plugin in the
    settings list when sudo's -s command line option is specified.
    The sudoers policy plugin uses this to implement the "set_home"
    sudoers option which was missing from sudo 1.8.0.
  - The "noexec" functionality has been moved out of the sudoers
    policy plugin and into the sudo front-end, which matches the
    behavior documented in the plugin writer's guide.  As a result,
    the path to the noexec file is now specified in the sudo.conf
    file instead of the sudoers file.
  - The exit values for "sudo -l", "sudo -v" and "sudo -l command"
    have been fixed in the sudoers policy plugin.
  - Sudo now parses command line arguments before loading any
    plugins.  This allows "sudo -V" or "sudo -h" to work even if
    there is a problem with sudo.conf
- drop sudo-dont-ignore-LDFLAGS.patch (merged upstream)</changelog>
<changelog author="prusnak@opensuse.org" date="1318507200">- updated to sudo-1.8.2
  * Sudo, visudo, sudoreplay and the sudoers plug-in now have natural
    language support (NLS). This can be disabled by passing configure
    the --disable-nls option.  Sudo will use gettext(), if available,
    to display translated messages.  All translations are coordinated
    via The Translation Project, http://translationproject.org/.
  * Plug-ins are now loaded with the RTLD_GLOBAL flag instead of
    RTLD_LOCAL.  This fixes missing symbol problems in PAM modules
    on certain platforms, such as FreeBSD and SuSE Linux Enterprise.
  * I/O logging is now supported for commands run in background mode
    (using sudo's -b flag).
  * Group ownership of the sudoers file is now only enforced when
    the file mode on sudoers allows group readability or writability.
  * Visudo now checks the contents of an alias and warns about cycles
    when the alias is expanded.
  * If the user specifes a group via sudo's -g option that matches
    the target user's group in the password database, it is now
    allowed even if no groups are present in the Runas_Spec.
  * The sudo Makefiles now have more complete dependencies which are
    automatically generated instead of being maintained manually.
  * The "use_pty" sudoers option is now correctly passed back to the
    sudo front end.  This was missing in previous versions of sudo
    1.8 which prevented "use_pty" from being honored.
  * "sudo -i command" now works correctly with the bash version
    2.0 and higher.  Previously, the .bash_profile would not be
    sourced prior to running the command unless bash was built with
    NON_INTERACTIVE_LOGIN_SHELLS defined.
  * When matching groups in the sudoers file, sudo will now match
    based on the name of the group instead of the group ID. This can
    substantially reduce the number of group lookups for sudoers
    files that contain a large number of groups.
  * Multi-factor authentication is now supported on AIX.
  * Added support for non-RFC 4517 compliant LDAP servers that require
    that seconds be present in a timestamp, such as Tivoli Directory Server.
  * If the group vector is to be preserved, the PATH search for the
    command is now done with the user's original group vector.
  * For LDAP-based sudoers, the "runas_default" sudoOption now works
    properly in a sudoRole that contains a sudoCommand.
  * Spaces in command line arguments for "sudo -s" and "sudo -i" are
    now escaped with a backslash when checking the security policy.
- added missing include (grp-include.patch)</changelog>
<changelog author="vcizek@suse.com" date="1319457600">- update to sudo-1.8.3
  - Fixed expansion of strftime() escape sequences
    in the log_dir sudoers setting.
  - Esperanto, Italian and Japanese
    translations from translationproject.org.
  - Added --enable-werror configure option for gcc's
  - Werror flag.  - Visudo no longer
    assumes all editors support the +linenumber command line argument.
    It now uses a whitelist of editors known to support the option.
  - Fixed matching of network addresses when a netmask is specified but
    the address is not the first one in the CIDR block.
  - The configure script now check whether or not errno.h declares the
    errno variable. Previously, sudo would always declare errno itself
    for older systems that don't declare it in errno.h.
  - The NOPASSWD tag is now honored for denied commands too,
    which matches historic sudo behavior (prior to sudo 1.7.0).
  - Sudo now honors the DEREF
    setting in ldap.conf which controls how alias dereferencing is done
    during an LDAP search.
  - A symbol conflict with the
    pam_ssh_agent_auth PAM module that would cause a crash been
    resolved.
  - The inability to load a group provider plugin is no
    longer a fatal error.
  - A potential crash in the utmp handling
    code has been fixed.
  - Two PAM session issues have been resolved.
    In previous versions of sudo, the PAM session was opened as one
    user and closed as another. Additionally, if no authentication was
    performed, the PAM session would never be closed.
  - The LOGNAME,
    USER and USERNAME environment variables are preserved correctly
    again in sudoedit mode.
- grp-include.patch no longer needed</changelog>
<changelog author="aj@suse.de" date="1325073600">- Set timedir correctly</changelog>
<changelog author="vcizek@suse.com" date="1325678400">- update to sudo-1.8.3p1
  * Fixed a crash in the monitor process on Solaris when NOPASSWD
    was specified or when authentication was disabled.
  * Fixed matching of a Runas_Alias in the group section of a Runas_Spec.</changelog>
<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>

</package>
<package pkgid="4d96112475d2eceefb58da7e36fa05c5f2d9dc6b805d0f1e3761cb5879d306e5" name="wireshark" arch="x86_64">
    <version epoch="0" ver="1.8.6" rel="1.4.1"/>

<changelog author="cyliu@novell.com" date="1312977600">- security fixes (#bnc 706728)
  * CVE-2011-2597: Lucent/Ascend file parser susceptible to infinite loop
  * CVE-2011-2698: ANSI MAP dissector susceptible to infinite loop</changelog>
<changelog author="cyliu@novell.com" date="1317038400">- security fixes (#bnc 718032)
  * CVE-2011-3266: Wireshark IKE dissector vulnerability
  * CVE-2011-3360: Wireshark Lua script execution vulnerability
  * CVE-2011-3483: Wireshark buffer exception handling vulnerability</changelog>
<changelog author="tabraham@novell.com" date="1320235200">- update to 1.6.3
  - Security fixes:
  - wnpa-sec-2011-17 The CSN.1 dissector could crash. (Bug 6351)
  - Bug fixes:
  - Wireshark window takes very long time to show up if invalid
    network file path is at recent file list (Bug 3810)
  - ISUP party number dissection. (Bug 5221)
  - Ethernet packets with both VLAN tag and LLC header no longer
    displayed correctly. (Bug 5645)
  - SLL encapsuled 802.1Q VLAN is not dissected. (Bug 5680)
  - Dissection fails for frames with Gigamon Header and VLAN. (Bug 6305)
  - RTP Stream Analysis does not work for TURN-encapsulated RTP. (Bug 6322)
  - packet-csn1.c doesn't process CSN_CHOICE entries properly. (Bug 6328)
  - GUI crash on invalid IEEE 802.11 GAS frame. (Bug 6345)
  - ICMPv6 router advertisement Prefix Information Flag R "Router
    Address" missing. (Bug 6350)
  - Inner tag of 802.1ad frames not parsed properly. (Bug 6366)
  - Added cursor type decoding to MySQL dissector. (Bug 6396)
  - WPA IE pairwise cipher suite dissector uses incorrect value_string
    list. (Bug 6420)
  - text_import_scanner.l missing. (Bug 6531)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACnet, CSN.1, DTN, Ethernet, ICMPv6, IEEE 802.11,
    IEEE 802.1q, Infiniband, IPsec, MySQL, PCEP, PN-RT, RTP, S1AP, SSL
  - New and Updated capture file suppport:
  - Endace ERF.
- update to 1.6.2
  - Security fixes:
  - wnpa-sec-2011-12 A large loop in the OpenSafety dissector could
    cause a crash. (Bug 6138)
  - wnpa-sec-2011-16 The CSN.1 dissector could crash. (Bug 6139)
  - Bug fixes:
  - configure ignores (partially) LDFLAGS. (Bug 5607)
  - Build fails when it tries to #include &lt;getopt.h&gt;, not present in
    Solaris 9. (Bug 5608)
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - BACnet who-is request device range values are not decoded correctly
    in the packet details window. (Bug 5769)
  - Wireshark crashes if sercosiii module isn't installed. (Bug 6006)
  - Editcap could create invalid pcap files when converting from JPEG.
    (Bug 6010)
  - Timestamp is incorrectly decoded for ICMP Timestamp Response packets
    from MS Windows. (Bug 6114)
  - Wrong display of CSN_BIT in CSN.1. (Bug 6151)
  - Fix CSN_RECURSIVE_TARRAY last bit error in packet-csn1.c. (Bug 6166)
  - Wireshark cannot display Reachable time &amp; Retrans timer in IPv6 RA
    messages. (Bug 6168)
  - ReadPropertyMultiple-ACK not correctly dissected. (Bug 6178)
  - GTPv2 dissectors should treat gtpv2_ccrsi as optional. (Bug 6183)
  - tshark run with -Tpdml makes a seg fault. (Bug 6245)
  - TShark/dumpcap skips capture duration flag occasionally. (Bug 6280)
  - Wireshark improperly parsing 802.11 Beacon Country Information
    tag. (Bug 6264)
  - Wrong display of CSN_BIT under CSN_UNION. (Bug 6287)
  - Updated protocol support:
  - BACapp, Bluetooth L2CAP, CSN.1, DCERPC, GSM A RR, GTPv2, ICMP,
    ICMPv6, IKE, MEGACO, MSISDN, NDMP, OpenSafety, RTPS2, sFlow, SNMP, TCP
  - New and Updated capture file suppport:
  - CommView, pcap-ng, JPEG.
- update to 1.6.1
  - Security fixes:
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is
    not correct in wireshark's user guide. (Bug 5199)
  - Character echo pauses in Capture Filter field in Capture Options.
    (Bug 5356)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many .
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing arguments.
    (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while the
    "default" field does nothing . (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem without
    tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - Cannot Live-capture VirtualBox network packets with Wireshark; pipe
    problem. (Bug 6002)
  - Interface list in Capture Options isn't cleared when selecting other
    host. (Bug 6008)
  - H323 rate multiplier wrong. (Bug 6009)
  - Inclusion of config.h is too late in lex-files resulting in wrong
    definition of _FILE_OFFSET_BITS. (Bug 6012)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - Crash after applying "expert.severity" field as column. (Bug 6035)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - Wireshark crashes after repeating "File -&gt; Import -&gt; Cancel". (Bug 6080)
  - Decoding of MQ ASCII and EBCDIC Traffic Flow - ASCII shows fine,
    EBCDIC does not. (Bug 6084)
  - 802.11 Association Response Packet's "Status Code" field is imprecisely
    decoded/described. (Bug 6093)
  - Abis interface not correctly handled in gsmtap dissector. (Bug 6097)
  - Wrong decoding of RLC/MAC EGPRS Packet Downlink Ack/Nack (3GPP TS
    44.060). (Bug 6098)
  - CSN Ack/Nack Description wrongly handled in gsm_rlcmac_dl dissector
    (3GPP TS 44.060). (Bug 6101)
  - wireshark 1.6.0 and python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - New and Updated capture file suppport:
  - Network Monitor.
- update to 1.6.0
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Crash when sorting column while capturing. (Bug 4273)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Large file (greater than 2 GB) support has been improved.
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - Wireshark can export SSL session keys via File-&gt;Export-&gt;SSL Session
    Keys...
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI, ICMP and ICMPv6 service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters.
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
    instead of a separate tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors.
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default.
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - Wireshark and TShark can now read compressed Windows Sniffer files.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Broadcast/Multicast Control, Constrained Application Protocol (COAP),
    Digium TDMoE, Erlang Distribution Protocol, Ether-S-I/O, FastCGI, Fibre
    Channel over InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband
    Socket Direct Protocol (SDP), JSON, LISP Control, LISP Data, LISP,
    MikroTik MAC-Telnet, MRP Multiple Mac Registration Protocol (MMRP) Mongo
    Wire Protocol, MUX27010, Network Monitor 802.11 radio header, OPC UA
    ExtensionObjects, openSAFETY, PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD
    Framing, RObust Header Compression (ROHC), RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, USB/AT Commands, uTorrent Transport Protocol, WAI
    authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.5.1
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - TShark can show a specific occurrence of a field when using '-T fields'.
  - Custom columns can show a specific occurrence of a field.
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Constrained Application Protocol (COAP), Digium TDMoE, Erlang
    Distribution Protocol, Ether-S-I/O, FastCGI, Fibre Channel over
    InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband Socket
    Direct Protocol (SDP), JSON, LISP Data, MikroTik MAC-Telnet, Mongo Wire
    Protocol, Network Monitor 802.11 radio header, OPC UA ExtensionObjects,
    PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD Framing, RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, WAI authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.4.10
  - Security fixes:
  - wnpa-sec-2011-18 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered that the Infiniband dissector could
    dereference a NULL pointer. (Bug 6476)
  - wnpa-sec-2011-19 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered a buffer overflow in the ERF file
    reader. (Bug 6479)
  - Bug fixes:
  - Assertion failed when doing File-&gt;Quit-&gt;Save during live
    capture. (Bug 1710)
  - Wrong PCEP XRO sub-object decoding. (Bug 3778)
  - Decoding [Status Records] Timestamp Sequence Field in Bundle
    Protocol fails if over 32 bits. (Bug 4109)
  - wireshark-1.4.2 crashes when testing the example python
    dissector because of a dissector count assertion. (Bug 5431)
  - Wireshark crashes when attempting to open a file via drag &amp; drop
    when there's already a file open. (Bug 5987)
  - Add the ability to save filters from the Filter Toolbar into buttons
    on the Filter Toolbar. (Bug 6207)
  - Adding and removing custom HTTP headers requires a restart. (Bug 6241)
  - Can't read full 64-bit SNMP values. (Bug 6295)
  - BACnet property time-synchronization-interval (204) name shown
    incorrectly as time-synchronization-recipients. (Bug 6336)
  - [ASN.1 PER] Incorrect decoding of BIT STRING type. (Bug 6347)
  - Export-&gt;Object-&gt;HTTP-&gt; save all: Error on saving files. (Bug 6362)
  - Incorrect identification of UDP-encapsulated NAT-keepalive
    packets. (Bug 6414)
  - S1AP protocol can't decode IPv6 transportLayerAddress. (Bug 6435)
  - RTPS2 dissector doesn't handle 0 in the octestToNextHeader field.
    (Bug 6449)
  - packet-ajp13 fix, cleanup, and enhancement. (Bug 6452)
  - Network Instruments Observer file format bugs. (Bug 6453)
  - Wireshark crashes when using "Open Recent" 2 times in a row. (Bug 6457)
  - Wireshark packet_gsm-sms, display bug: Filler bits in TP-User Data
    Header. (Bug 6469)
  - wireshark unable to decode NetFlow options which have system scope
    size != 4 bytes. (Bug 6471)
  - Display filter Expression Dialog Box Error. (Bug 6472)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACapp, DTN, GSM SMS, Infiniband, IPsec, NetFlow,
    PCEP, RTPS2
- update to 1.4.9
  - Security fixes:
  - wnpa-sec-2011-13 A malformed IKE packet could consume excessive
    resources.
  - wnpa-sec-2011-14 A malformed capture file could result in an invalid
    root tvbuff and cause a crash. (Bug 6135) CVE-2011-3266
  - wnpa-sec-2011-15 Wireshark could run arbitrary Lua scripts. (Bug 6136)
  - Bug fixes:
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - H.323 RAS packets missing from packet counts in "Telephony-&gt;VoIP
    Calls" and the "Flow Graph" for the call. (Bug 5848)
  - Malformed Packet in decode for BGP-AD update. (Bug 6122)
  - BGP : AS_PATH attribute was decode wrong. (Bug 6188)
  - Fixes for SCPS TCP option. (Bug 6194)
  - Offset calculated incorrectly for sFlow extended data. (Bug 6219)
  - [Enter] key behavior varies when manually typing display filters.
    (Bug 6228)
  - Contents of pcapng EnhancedPacketBlocks with comments aren't
    displayed. (Bug 6229)
  - Misdecoding 3G Neighbour Cell Information Element in SI2quater
    message due to a coding typo. (Bug 6237)
  - Mis-spelled word "unknown" in assorted files. (Bug 6244)
  - btl2cap extended window shows wrong bit. (Bug 6257)
  - NDMP dissector incorrectly represents "ndmp.bytes_left_to_read"
    as signed. (Bug 6262)
  - ERF records with extension headers not written out correctly to
    pcap or pcap-ng files. (Bug 6265)
  - RTPS2: MAX_BITMAP_SIZE is defined incorrectly. (Bug 6276)
  - Copying from RTP stream analysis copies 1st line many times. (Bug 6279)
  - File types with no snaplen written out with a zero snaplen in pcap-ng
    files. (Bug 6289)
  - MEGACO context tracking fix - context id reuse. (Bug 6311)
  - Updated protocol support:
  - BGP, Bluetooth L2CAP, GSM A RR, H.225, IKE, MEGACO, NDMP, RTPS2, SCPS,
    sFlow, SNMP
  - New and Updated capture file suppport:
  - CommView, pcap-ng.
  - update to 1.4.8
  - Security fixes:
  - CVE-2011-2597 The Lucent/Ascend file parser was susceptible to an
    infinite loop.
  - The ANSI MAP dissector was susceptible to an infinite loop. (Bug 6044)
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - Wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is not
    correct in wireshark's user guide. (Bug 5199)
  - sflow decode error for some extended formats. (Bug 5379)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many.
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing
    arguments. (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while
    the "default" field does nothing. (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem
    without tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - H323 rate multiplier wrong. (Bug 6009)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - 802.11 Association Response Packet's "Status Code" field is
    imprecisely decoded/described. (Bug 6093)
  - Wireshark 1.6.0 and Python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - Updated protocol support:
  - ANSI MAP, GIOP, H.323, IEEE 802.11, MSRP, RPCAP, sFlow, TCP
  - New and Updated capture file suppport:
  - Lucent/Ascend
  - update to 1.4.7
  - Security fixes:
  - Large/infinite loop in the DICOM dissector. (Bug 5876)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Diameter dictionary file could crash Wireshark.
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted snoop file could crash Wireshark. (Bug 5912)
  - David Maciejak of Fortinet's FortiGuard Labs discovered that malformed
    compressed capture data could crash Wireshark. (Bug 5908)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Visual Networks file could crash Wireshark. (Bug 5934)
  - Bug fixes:
  - AIM dissector has some endian issues. (Bug 5464)
  - Telephony-&gt;MTP3-&gt;MSUS doesn't display window. (Bug 5605)
  - Support for MS NetMon 3.x traces containing raw IPv6 ("Type 7")
    packets. (Bug 5817)
  - Service Indicator in M3UA protocol data. (Bug 5834)
  - IEC60870-5-104 protocol, incorrect decoding of timestamp type
    CP56Time2a. (Bug 5889)
  - DNP3 dissector incorrect constants AL_OBJ_FCTR_16NF _FDCTR_32NF
    _FDCTR_16NF. (Bug 5920)
  - 3GPP QoS: Traffic class is not decoded properly. (Bug 5928)
  - Wireshark crashes when creating ProtoField.framenum in Lua. (Bug 5930)
  - Fix a wrong mask to extract FMID from DECT packets dissector. (Bug 5947)
  - Incorrect DHCPv6 remote identifier option parsing. (Bug 5962)
  - Updated protocol support:
  - DICOM, IEC104, M3UA, TCP
  - New and Updated capture file suppport:
  - Network Monitor
- Drop patches (fixed upstream):
  + wireshark-1.6.2-CVE-2011-3483.patch
  + wireshark-1.6.2-CVE-2011-3360.patch
  + wireshark-1.6.2-CVE-2011-3266.patch
  + wireshark-1.4.8-CVE-2011-2698.patch
  + wireshark-1.4.8-CVE-2011-2597.patch
  + wireshark-1.2.17-CVE-2011-2175.patch
  + wireshark-1.2.17-CVE-2011-2174.patch
  + wireshark-1.2.17-CVE-2011-1959.patch
  + wireshark-1.2.17-CVE-2011-1958.patch
  + wireshark-1.2.17-CVE-2011-1957.patch
  + wireshark-nfsv4-opts.patch
- changed spec to resolve rpmlint warning regarding devel package in
  non-devel group
- changed spec to resolve rpmlint warnings regarding macro-in-comment</changelog>
<changelog author="cyliu@suse.com" date="1326801600">- update to 1.6.5
  - Security fixes:
  - wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to
    properly check record sizes for many packet capture file formats.
    (Bug 6663, bug 6666, bug 6667, bug 6668, bug 6669, bug 6670)
  - wnpa-sec-2012-02  Wireshark could dereference a NULL pointer and
    crash. (Bug 6634)
  - wnpa-sec-2012-03  The RLC dissector could overflow a buffer. (Bug 6391)
  - Bug fixes:
  - "Closing File!" Dialog Hangs. (Bug 3046)
  - Sub-fields of data field should appear in exported PDML as children
    of the data field instead of as siblings to it. (Bug 3809)
  - Incorrect time differences displayed with time reference set. (Bug 5580)
  - Wrong packet type association of SNMP trap after TFTP transfer. (Bug 5727)
  - SSL/TLS decryption needs wireshark to be rebooted. (Bug 6032)
  - Export HTTP Objects -&gt; save all crashes Wireshark. (Bug 6250)
  - Wireshark Netflow dissector complains there is no template found though
    the template is exported. (Bug 6325)
  - DCERPC EPM tower UUID must be interpreted always as little endian.
    (Bug 6368)
  - Crash if no recent files. (Bug 6549)
  - IPv6 frame containing routing header with 0 segments left calculates wrong
    UDP checksum. (Bug 6560)
  - IPv4 UDP/TCP Checksum incorrect if routing header present. (Bug 6561)
  - Incorrect Parsing of SCPS Capabilities Option introduced in response
    to bug 6194. (Bug 6562)
  - Various crashes after loading NetMon2.x capture file. (Bug 6578)
  - Fixed compilation of dumpcap on some systems (when MUST_DO_SELECT is
    defined). (Bug 6614)
  - SIGSEGV in SVN 40046. (Bug 6634)
  - Wireshark dissects TCP option 25 as an "April 1" option. (Bug 6643)
  - ZigBee ZCL Dissector reports invalid status. (Bug 6649)
  - ICMPv6 DNSSL option malformed on padding. (Bug 6660)
  - Wrong tvb_get_bits function call in packet-csn1.c. (Bug 6708)
  - [UDP] - Length Field of Pseudo Header while computing CheckSum is not
    correct. (Bug 6711)
  - pcapio.c: bug in libpcap_write_interface_description_block. (Bug 6719)
  - Memory leaks in various dissectors.
  - Bytes highlighted in wrong Byte pane when field selected in Details pane.
  - Updated Protocol Support
  - BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management,
    H245 HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6,
    ISAKMP KERBEROS LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP
    SSL SYSLOG TCP, UDP, XML ZigBee ZCL
  - New and Updated Capture File Support
  - Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network
    Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer, Tektronix
    K12, WildPackets {Airo,Ether}Peek.
- update to 1.6.4
  - Bug fixes:
  - Patch to fix memory leaks/errors in Lua plugin. (Bug 5575)
  - Wireshark crashes if a field of type BASE_CUSTOM is applied as a
    column. (Bug 6503)
  - Filter Expression dialog can only be opened once. (Bug 6537)
  - Wireshark crashes if compiled without GLib thread support. (Bug 6540)
  - 80211 QoS Control: Add Raw TID. (Bug 6548)
  - SNMP length check error. (Bug 6564)
  - UCP dissector bug of operation 61. (Bug 6570)
- fix bnc#741187, #741188, #741190</changelog>
<changelog author="asn@cryptomilk.org" date="1330603200">- Add known bit for Netlogon ServerAutheticate2 flags.</changelog>
<changelog author="zaitor@opensuse.org" date="1333281600">- Update to version 1.6.6:
  + wnpa-sec-2012-04: The ANSI A dissector could dereference a NULL
    pointer and crash. (Bug 6823)
  + wnpa-sec-2012-05: The IEEE 802.11 dissector could go into an
    infinite loop. (Bug 6809)
  + wnpa-sec-2012-06: The pcap and pcap-ng file parsers could crash
    trying to read ERF data. (Bug 6804)
  + wnpa-sec-2012-07: The MP2T dissector could try to allocate too
    much memory and crash. (Bug 6804)
  + The Windows installers now include GnuTLS 1.12.18, which fixes
    several vulnerabilities.
  + Bugs fixed:
  - ISO SSAP: ActivityStart: Invalid decoding the activity
    parameter as a BER Integer. (Bug 2873)
  - Forward slashes in URI need to be converted to backslashes if
    WIN32. (Bug 5237)
  - Character echo pauses in Capture Filter field in Capture
    Options. (Bug 5356)
  - Some PGM options are not parsed correctly. (Bug 5687)
  - dumpcap crashes when capturing from pipe to a pcap-ng file
    (e.g., when passing data from CACE Pilot to Wireshark). (Bug
    5939)
  - Unable to rearrange columns in preferences on Windows. (Bug
    6077) (Note: this bug still affects the 64-bit package)
  - No error for UDP/IPv6 packet with zero checksum. (Bug 6232)
  - Wireshark installer doesn't add access_bpf in 10.5.8. (Bug
    6526)
  - Corrupted Diameter dictionary file that crashes Wireshark.
    (Bug 6664)
  - packetBB dissector bug: More than 1000000 items in the tree
    possible infinite loop. (Bug 6687)
  - ZEP dissector: Timestamp not always displayed correctly.
    Fractional seconds never displayed. (Bug 6703)
  - GOOSE Messages don't use the length field to perform the
    dissection. (Bug 6734)
  - Ethernet traces in K12 text format sometimes give bogus
    "malformed frame" errors and other problems. (Bug 6735)
  - max_ul_ext isn't printed/decoded to the packet details log in
    GTP protocol packet. (Bug 6761)
  - non-IPP packets to or from port 631 are dissected as IPP.
    (Bug 6765)
  - lua proto registration fails for uppercase proto /
    g_ascii_strdown problem. (Bug 6766)
  - no menu item Fle-&gt;Export-&gt;SSL Session Keys in GTK. (Bug 6813)
  - IAX2 dissector reads past end of packet for unknown IEs. (Bug
    6815)
  - TShark 1.6.5 immediately crashes on SSL decryption (every
    time). (Bug 6817)
  - USB: unknown GET DESCRIPTOR response triggers assert failure.
    (Bug 6826)
  - IEEE1588 PTPv2 over IPv6. (Bug 6836)
  - Patch to fix DTLS decryption. (Bug 6847)
  - Expression... dialog crash. (Bug 6891)
  - display filter "gtp.msisdn" not working. (Bug 6947)
  - Multiprotocol Label Switching Echo - Return Code: Reserved(5)
    (Bug 6951)
  - ISAKMP : VendorID CheckPoint : Malformed Packet. (Bug 6972)
  - Adding a Custom HTTP Header Field with a trailing colon
    causes wireshark to immediately crash (and crash upon
    restart). (Bug 6982)
  - Radiotap dissector lists a bogus "DBM TX Attenuation" bit.
    (Bug 7000)
  - MySQL dissector assertion. (Ask 8649)
  - Radiotap header format data rate alignment issues. (Ask 8649)</changelog>
<changelog author="reddwarf@opensuse.org" date="1334404800">- Update to version 1.6.7:
  + Bugs fixed:
  - Malformed Packets H263-1996 (RFC2190). (Bug 6996)
  - Wireshark could crash while trying to open an rpcap: URL.
    (Bug 6922)
  + Updated H.263 Protocol Support</changelog>
<changelog author="andreas.stieger@gmx.de" date="1337688000">- adjust wireshark-corosync-packet-dissector.patch for source changes
- update to upstream 1.6.8
  + security fixes
  * wnpa-sec-2012-08 / CVE-2012-2392
    Infinite and large loops in the ANSI MAP, ASF, BACapp,
    Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 dissectors
    have been fixed. Discovered by Laurent Butti. (Bugs 6805,
    7118, 7119, 7120, 7121, 7122, 7124, 7125)
  * wnpa-sec-2012-09 / CVE-2012-2393
    The DIAMETER dissector could try to allocate memory improperly
    and crash. (Bug 7138)
  * wnpa-sec-2012-10 / CVE-2012-2394
    Wireshark could crash on SPARC processors due to misaligned
    memory. Discovered by Klaus Heckelmann. (Bug 7221)
  + bug fixes
  * User-Password - PAP decoding passwords longer than 16 bytes.
    (Bug 6779)
  * The MSISDN is not seen correctly in GTP packet. (Bug 7042)
  * Wireshark doesn't calculate the right IPv4 destination using
    source routing options when bad options precede them. (Bug
    7043)
  * BOOTP dissector issue with DHCP option 82 - suboption 9. (Bug
    7047)
  * MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW
    packets. (Bug 7089)
  * ANSI MAP infinite loop. (Bug 7119)
  * HCIEVT infinite loop. (Bug 7122)
  * Wireshark doesn't decode NFSv4.1 operations. (Bug 7127)
  * LTP infinite loop. (Bug 7124)
  * Wrong values in DNS CERT RR. (Bug 7130)
  * Megaco parser problem with LF in header. (Bug 7198)
  * OPC UA bytestring node id decoding is wrong. (Bug 7226)
  + Updated Protocol Support
    ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP,
    IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA,
    RADIUS
  + New and Updated Capture File Support
    5View, CSIDS, pcap, pcap-ng</changelog>
<changelog author="opensuse@sukimashita.com" date="1338724800">- Add all known headers to devel package in order to make it
  actually useable and allow building dissectors externally</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340366400">- update to upstream 1.8.0:
  * supports capturing from multiple interfaces at once.
  * add, edit, and save packet and capture file annotations.
  * pcap-ng file format is default
  * Decryption key management for IEEE 802.11, IPsec, and ISAKMP
    is easier.
  * GeoIP IPv6 databases are now supported.
  * large number of protocol dissectors added and updated
  * support for many capture file formats added and updated
  For a full list refer to the release notes:
  https://www.wireshark.org/docs/relnotes/wireshark-1.8.0.html
- drop wireshark-corosync-packet-dissector.patch, no longer compiles
  even after updating
- drop wireshark-1.6.5-netlogon-aes.patch, applied upstream
- drop idl2wrs command from -devel package
- update header files in include.filelist
- refresh wireshark-1.2.0-disable-warning-dialog.patch
- refresh wireshark-1.2.0-geoip.patch
- add wireshark-1.8.0-gmodule.patch to fix linking in factory</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343131200">- update to upstream 1.8.1 (bnc#772738)
  + vulnerabilities fixed:
  * The PPP dissector could crash
    (wnpa-sec-2012-11 CVE-2012-4048)
  * The NFS dissector could use excessive amounts of CPU
    (wnpa-sec-2012-12 CVE-2012-4049)
  + bug fixes:
  * Wireshark crashes on bootp filter
  * Wireshark &gt; 1.4 does not correctly read Association ID for PS
    Poll packets
  * Radius-EAP broken since 1.8.0 release
  * SNMP incorrectly marks SNMPv3 "discovery" packet as malformed
  * Widgets are not properly expanded in GTK3
  * Find Next Mark duplicated on Edit Menu
  * DVB-CI/CI+: fix offset error in operator_info apdu
  * Unable to correctly identify IEC 61850 MMS packets
  * WinPcap doesn't install if vcredist_x64 requires reboot
- remove wireshark-1.8.0-gmodule.patch, fixed upstream</changelog>
<changelog author="andreas.stieger@gmx.de" date="1345032000">- update to upstream 1.8.2 (bnc#776083)
  + vulnerabilities fixed:
  * The DCP ETSI dissector could trigger a zero division.
    (wnpa-sec-2012-13 CVE-2012-4285)
  * The MongoDB dissector could go into a large loop.
    (wnpa-sec-2012-14 CVE-2012-4287)
  * The XTP dissector could go into an infinite loop.
    (wnpa-sec-2012-15 CVE-2012-4288)
  * The ERF dissector could overflow a buffer.
    (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295)
  * The AFP dissector could go into a large loop.
    (wnpa-sec-2012-17 CVE-2012-4289)
  * The RTPS2 dissector could overflow a buffer.
    (wnpa-sec-2012-18 CVE-2012-4296)
  * The GSM RLC MAC dissector could overflow a buffer.
    (wnpa-sec-2012-19 CVE-2012-4297)
  * The CIP dissector could exhaust system memory.
    (wnpa-sec-2012-20 CVE-2012-4291)
  * The STUN dissector could crash.
    (wnpa-sec-2012-21 CVE-2012-4292)
  * The EtherCAT Mailbox dissector could abort.
    (wnpa-sec-2012-22 CVE-2012-4293)
  * The CTDB dissector could go into a large loop.
    (wnpa-sec-2012-23 CVE-2012-4290)
  * The pcap-ng file parser could trigger a zero division.
    (wnpa-sec-2012-24 CVE-2012-4286)
  * The Ixia IxVeriWave file parser could overflow a buffer.
    (wnpa-sec-2012-25 CVE-2012-4298)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.html
- adjust wireshark-1.2.0-disable-warning-dialog.patch for moved lines</changelog>
<changelog author="cfarrell@suse.com" date="1346414400">- license update: GPL-2.0+ and GPL-3.0+
  According to the COPYING file the PIDL utility (standalone tool) is
  GPL-3.0+ licensed</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to upstream 1.8.3 (bnc#783275)
  + vulnerabilities fixed:
  * The HSRP dissector could go into an infinite loop.
    (wnpa-sec-2012-26 CVE-2012-5237)
  * The PPP dissector could abort.
    (wnpa-sec-2012-27 CVE-2012-5238)
  * Martin Wilck discovered an infinite loop in the DRDA dissector.
    (wnpa-sec-2012-28 CVE-2012-5239 CVE-2012-3548 bnc#778000)
  * Laurent Butti discovered a buffer overflow in the LDP dissector.
    (wnpa-sec-2012-29 CVE-2012-5240)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.3.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1352894400">- for openSUSE 12.2 and later, build against lua51-devel instead
  of lua-devel for Lua support (bnc#780669)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354190400">- update to 1.8.4 [bnc#792005]
  + vulnerabilities fixed:
  * Wireshark could leak potentially sensitive host name
    resolution information when working with multiple pcap-ng
    files.
    wnpa-sec-2012-30 CVE-2012-5592
  * The USB dissector could go into an infinite loop.
    wnpa-sec-2012-31 CVE-2012-5593
  * The sFlow dissector could go into an infinite loop.
    wnpa-sec-2012-32 CVE-2012-5594
  * The SCTP dissector could go into an infinite loop.
    wnpa-sec-2012-33 CVE-2012-5595
  * The EIGRP dissector could go into an infinite loop.
    wnpa-sec-2012-34 CVE-2012-5596
  * The ISAKMP dissector could crash.
    wnpa-sec-2012-35 CVE-2012-5597
  * The iSCSI dissector could go into an infinite loop.
    wnpa-sec-2012-36 CVE-2012-5598
  * The WTP dissector could go into an infinite loop.
    wnpa-sec-2012-37 CVE-2012-5599
  * The RTCP dissector could go into an infinite loop.
    wnpa-sec-2012-38 CVE-2012-5600
  * The 3GPP2 A11 dissector could go into an infinite loop.
    wnpa-sec-2012-39 CVE-2012-5601
  * The ICMPv6 dissector could go into an infinite loop.
    wnpa-sec-2012-40 CVE-2012-5602
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add wireshark-suidflags.patch: Allow to pass SUID_{C,LD}FLAGS to
  introduce -fPIE -pie as needed for suid binaries
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.
- Export SUID_{C,LD}FLAGS with appropriate flags.</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- build with gtk3 on 11.4+
- disable zlib makes a sense for 1.2.5 only
- turn some features on (python, gcrypt, gnutls, plugins dir)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1359633600">- update to 1.8.5 [bnc#801131]
  + vulnerabilities fixed:
  * Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI
    DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS,
    SDP, and SIP dissectors
    wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574
    CVE-2013-1575 CVE-2013-1576 CVE-2013-1577 CVE-2013-1578
    CVE-2013-1579 CVE-2013-1580 CVE-2013-1581
  * The CLNP dissector could crash
    wnpa-sec-2013-02 CVE-2013-1582
  * The DTN dissector could crash
    wnpa-sec-2013-03 CVE-2013-1583 CVE-2013-1584
  * The MS-MMC dissector (and possibly others) could crash
    wnpa-sec-2013-04 CVE-2013-1585
  * The DTLS dissector could crash
    wnpa-sec-2013-05 CVE-2013-1586
  * The ROHC dissector could crash
    wnpa-sec-2013-06 CVE-2013-1587
  * The DCP-ETSI dissector could corrupt memory
    wnpa-sec-2013-07 CVE-2013-1588
  * The Wireshark dissection engine could crash
    wnpa-sec-2013-08 CVE-2013-1589
  * The NTLMSSP dissector could overflow a buffer
    wnpa-sec-2013-09 CVE-2013-1590
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1362657600">- update to 1.8.6 [bnc#807942]
  + vulnerabilities fixed:
  * The TCP dissector could crash.
    wnpa-sec-2013-10 CVE-2013-2475
  * The HART/IP dissectory could go into an infinite loop.
    wnpa-sec-2013-11 CVE-2013-2476
  * The CSN.1 dissector could crash.
    wnpa-sec-2013-12 CVE-2013-2477
  * The MS-MMS dissector could crash.
    wnpa-sec-2013-13 CVE-2013-2478
  * The MPLS Echo dissector could go into an infinite loop.
    wnpa-sec-2013-14 CVE-2013-2479
  * The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15 CVE-2013-2480
  * The Mount dissector could crash.
    wnpa-sec-2013-16 CVE-2013-2481
  * The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17 CVE-2013-2482
  * The ACN dissector could attempt to divide by zero.
    wnpa-sec-2013-18 CVE-2013-2483
  * The CIMD dissector could crash.
    wnpa-sec-2013-19 CVE-2013-2484
  * The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20 CVE-2013-2485
  * The RELOAD dissector could go into an infinite loop.
    wnpa-sec-2013-21 CVE-2013-2486 CVE-2013-2487
  * The DTLS dissector could crash.
    wnpa-sec-2013-22 CVE-2013-2488
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html</changelog>

</package>
<package pkgid="7d1a07eea76d0ea8b1465e6c93c58b951cab33756b05e85c53a7b40c90d4a6fb" name="wireshark-devel" arch="x86_64">
    <version epoch="0" ver="1.8.6" rel="1.4.1"/>

<changelog author="cyliu@novell.com" date="1312977600">- security fixes (#bnc 706728)
  * CVE-2011-2597: Lucent/Ascend file parser susceptible to infinite loop
  * CVE-2011-2698: ANSI MAP dissector susceptible to infinite loop</changelog>
<changelog author="cyliu@novell.com" date="1317038400">- security fixes (#bnc 718032)
  * CVE-2011-3266: Wireshark IKE dissector vulnerability
  * CVE-2011-3360: Wireshark Lua script execution vulnerability
  * CVE-2011-3483: Wireshark buffer exception handling vulnerability</changelog>
<changelog author="tabraham@novell.com" date="1320235200">- update to 1.6.3
  - Security fixes:
  - wnpa-sec-2011-17 The CSN.1 dissector could crash. (Bug 6351)
  - Bug fixes:
  - Wireshark window takes very long time to show up if invalid
    network file path is at recent file list (Bug 3810)
  - ISUP party number dissection. (Bug 5221)
  - Ethernet packets with both VLAN tag and LLC header no longer
    displayed correctly. (Bug 5645)
  - SLL encapsuled 802.1Q VLAN is not dissected. (Bug 5680)
  - Dissection fails for frames with Gigamon Header and VLAN. (Bug 6305)
  - RTP Stream Analysis does not work for TURN-encapsulated RTP. (Bug 6322)
  - packet-csn1.c doesn't process CSN_CHOICE entries properly. (Bug 6328)
  - GUI crash on invalid IEEE 802.11 GAS frame. (Bug 6345)
  - ICMPv6 router advertisement Prefix Information Flag R "Router
    Address" missing. (Bug 6350)
  - Inner tag of 802.1ad frames not parsed properly. (Bug 6366)
  - Added cursor type decoding to MySQL dissector. (Bug 6396)
  - WPA IE pairwise cipher suite dissector uses incorrect value_string
    list. (Bug 6420)
  - text_import_scanner.l missing. (Bug 6531)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACnet, CSN.1, DTN, Ethernet, ICMPv6, IEEE 802.11,
    IEEE 802.1q, Infiniband, IPsec, MySQL, PCEP, PN-RT, RTP, S1AP, SSL
  - New and Updated capture file suppport:
  - Endace ERF.
- update to 1.6.2
  - Security fixes:
  - wnpa-sec-2011-12 A large loop in the OpenSafety dissector could
    cause a crash. (Bug 6138)
  - wnpa-sec-2011-16 The CSN.1 dissector could crash. (Bug 6139)
  - Bug fixes:
  - configure ignores (partially) LDFLAGS. (Bug 5607)
  - Build fails when it tries to #include &lt;getopt.h&gt;, not present in
    Solaris 9. (Bug 5608)
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - BACnet who-is request device range values are not decoded correctly
    in the packet details window. (Bug 5769)
  - Wireshark crashes if sercosiii module isn't installed. (Bug 6006)
  - Editcap could create invalid pcap files when converting from JPEG.
    (Bug 6010)
  - Timestamp is incorrectly decoded for ICMP Timestamp Response packets
    from MS Windows. (Bug 6114)
  - Wrong display of CSN_BIT in CSN.1. (Bug 6151)
  - Fix CSN_RECURSIVE_TARRAY last bit error in packet-csn1.c. (Bug 6166)
  - Wireshark cannot display Reachable time &amp; Retrans timer in IPv6 RA
    messages. (Bug 6168)
  - ReadPropertyMultiple-ACK not correctly dissected. (Bug 6178)
  - GTPv2 dissectors should treat gtpv2_ccrsi as optional. (Bug 6183)
  - tshark run with -Tpdml makes a seg fault. (Bug 6245)
  - TShark/dumpcap skips capture duration flag occasionally. (Bug 6280)
  - Wireshark improperly parsing 802.11 Beacon Country Information
    tag. (Bug 6264)
  - Wrong display of CSN_BIT under CSN_UNION. (Bug 6287)
  - Updated protocol support:
  - BACapp, Bluetooth L2CAP, CSN.1, DCERPC, GSM A RR, GTPv2, ICMP,
    ICMPv6, IKE, MEGACO, MSISDN, NDMP, OpenSafety, RTPS2, sFlow, SNMP, TCP
  - New and Updated capture file suppport:
  - CommView, pcap-ng, JPEG.
- update to 1.6.1
  - Security fixes:
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is
    not correct in wireshark's user guide. (Bug 5199)
  - Character echo pauses in Capture Filter field in Capture Options.
    (Bug 5356)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many .
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing arguments.
    (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while the
    "default" field does nothing . (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem without
    tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - Cannot Live-capture VirtualBox network packets with Wireshark; pipe
    problem. (Bug 6002)
  - Interface list in Capture Options isn't cleared when selecting other
    host. (Bug 6008)
  - H323 rate multiplier wrong. (Bug 6009)
  - Inclusion of config.h is too late in lex-files resulting in wrong
    definition of _FILE_OFFSET_BITS. (Bug 6012)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - Crash after applying "expert.severity" field as column. (Bug 6035)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - Wireshark crashes after repeating "File -&gt; Import -&gt; Cancel". (Bug 6080)
  - Decoding of MQ ASCII and EBCDIC Traffic Flow - ASCII shows fine,
    EBCDIC does not. (Bug 6084)
  - 802.11 Association Response Packet's "Status Code" field is imprecisely
    decoded/described. (Bug 6093)
  - Abis interface not correctly handled in gsmtap dissector. (Bug 6097)
  - Wrong decoding of RLC/MAC EGPRS Packet Downlink Ack/Nack (3GPP TS
    44.060). (Bug 6098)
  - CSN Ack/Nack Description wrongly handled in gsm_rlcmac_dl dissector
    (3GPP TS 44.060). (Bug 6101)
  - wireshark 1.6.0 and python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - New and Updated capture file suppport:
  - Network Monitor.
- update to 1.6.0
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Crash when sorting column while capturing. (Bug 4273)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Large file (greater than 2 GB) support has been improved.
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - Wireshark can export SSL session keys via File-&gt;Export-&gt;SSL Session
    Keys...
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI, ICMP and ICMPv6 service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters.
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
    instead of a separate tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors.
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default.
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - Wireshark and TShark can now read compressed Windows Sniffer files.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Broadcast/Multicast Control, Constrained Application Protocol (COAP),
    Digium TDMoE, Erlang Distribution Protocol, Ether-S-I/O, FastCGI, Fibre
    Channel over InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband
    Socket Direct Protocol (SDP), JSON, LISP Control, LISP Data, LISP,
    MikroTik MAC-Telnet, MRP Multiple Mac Registration Protocol (MMRP) Mongo
    Wire Protocol, MUX27010, Network Monitor 802.11 radio header, OPC UA
    ExtensionObjects, openSAFETY, PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD
    Framing, RObust Header Compression (ROHC), RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, USB/AT Commands, uTorrent Transport Protocol, WAI
    authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.5.1
  - Security fixes:
  - Bug fixes:
  - Wireshark is unresponsive when capturing from named pipes on Windows.
    (Bug 1759)
  - Ring buffers are no longer turned on by default when using multiple
    capture files.
  - New and updated features:
  - Wireshark and TShark can import text dumps, similar to text2pcap
  - You can now view Wireshark's dissector tables (for example the TCP
    port to dissector mappings) from the main window.
  - TShark can show a specific occurrence of a field when using '-T fields'.
  - Custom columns can show a specific occurrence of a field.
  - You can hide columns in the packet list.
  - Wireshark can now export SMB objects.
  - dftest and randpkt now have manual pages.
  - TShark can now display iSCSI service response times.
  - Dumpcap can now save files with a user-specified group id.
  - Syntax checking is done for capture filters
  - You can display the compiled BPF code for capture filters in the
    Capture Options dialog.
  - You can now navigate backwards and forwards through TCP and UDP
    sessions using Ctrl+, and Ctrl+. .
  - Packet length is (finally) a default column.
  - TCP window size is now avaiable both scaled and unscaled. A TCP window
    scaling graph is available in the GUI.
  - 802.1q VLAN tags are now shown in the Ethernet II protocol tree
  - Various dissectors now display some UTF-16 strings as proper Unicode
    including the DCE/RPC and SMB dissectors
  - The RTP player now has an option to show the time of day in the graph
    in addition to the seconds since beginning of capture.
  - The RTP player now shows why media interruptions occur.
  - Graphs now save as PNG images by default
  - TShark can read and write host name information from and to pcapng
    formatted files. Wireshark can read it. TShark can dump host name
    information via [-z hosts]
  - TShark's -z option now uses the [-z &lt;proto&gt;,srt] syntax instead of
    [-z &lt;proto&gt;,rtt] for all protocols that support service response
    time statistics. This matches Wireshark's syntax for this option.
  - New protocol support:
  - ADwin, ADwin-Config, Apache Etch, Aruba PAPI, Babel Routing Protocol,
    Constrained Application Protocol (COAP), Digium TDMoE, Erlang
    Distribution Protocol, Ether-S-I/O, FastCGI, Fibre Channel over
    InfiniBand (FCoIB), Gopher, Gigamon GMHDR, IDMP, Infiniband Socket
    Direct Protocol (SDP), JSON, LISP Data, MikroTik MAC-Telnet, Mongo Wire
    Protocol, Network Monitor 802.11 radio header, OPC UA ExtensionObjects,
    PPI-GEOLOCATION-GPS, ReLOAD, ReLOAD Framing, RSIP, SAMETIME, SCoP, SGSAP,
    Tektronix Teklink, WAI authentication, Wi-Fi P2P (Wi-Fi Direct)
  - New and Updated capture file suppport:
  - Apple PacketLogger, Catapult DCT2000, Daintree SNA, Endace ERF, HP
    OpenVMS TCPTrace, IPFIX (the file format, not the protocol),
    Lucent/Ascend debug, Microsoft Network Monitor, Network Instruments,
    TamoSoft CommView
- update to 1.4.10
  - Security fixes:
  - wnpa-sec-2011-18 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered that the Infiniband dissector could
    dereference a NULL pointer. (Bug 6476)
  - wnpa-sec-2011-19 Huzaifa Sidhpurwala of Red Hat Security
    Response Team discovered a buffer overflow in the ERF file
    reader. (Bug 6479)
  - Bug fixes:
  - Assertion failed when doing File-&gt;Quit-&gt;Save during live
    capture. (Bug 1710)
  - Wrong PCEP XRO sub-object decoding. (Bug 3778)
  - Decoding [Status Records] Timestamp Sequence Field in Bundle
    Protocol fails if over 32 bits. (Bug 4109)
  - wireshark-1.4.2 crashes when testing the example python
    dissector because of a dissector count assertion. (Bug 5431)
  - Wireshark crashes when attempting to open a file via drag &amp; drop
    when there's already a file open. (Bug 5987)
  - Add the ability to save filters from the Filter Toolbar into buttons
    on the Filter Toolbar. (Bug 6207)
  - Adding and removing custom HTTP headers requires a restart. (Bug 6241)
  - Can't read full 64-bit SNMP values. (Bug 6295)
  - BACnet property time-synchronization-interval (204) name shown
    incorrectly as time-synchronization-recipients. (Bug 6336)
  - [ASN.1 PER] Incorrect decoding of BIT STRING type. (Bug 6347)
  - Export-&gt;Object-&gt;HTTP-&gt; save all: Error on saving files. (Bug 6362)
  - Incorrect identification of UDP-encapsulated NAT-keepalive
    packets. (Bug 6414)
  - S1AP protocol can't decode IPv6 transportLayerAddress. (Bug 6435)
  - RTPS2 dissector doesn't handle 0 in the octestToNextHeader field.
    (Bug 6449)
  - packet-ajp13 fix, cleanup, and enhancement. (Bug 6452)
  - Network Instruments Observer file format bugs. (Bug 6453)
  - Wireshark crashes when using "Open Recent" 2 times in a row. (Bug 6457)
  - Wireshark packet_gsm-sms, display bug: Filler bits in TP-User Data
    Header. (Bug 6469)
  - wireshark unable to decode NetFlow options which have system scope
    size != 4 bytes. (Bug 6471)
  - Display filter Expression Dialog Box Error. (Bug 6472)
  - Updated protocol support:
  - AJP13, ASN.1 PER, BACapp, DTN, GSM SMS, Infiniband, IPsec, NetFlow,
    PCEP, RTPS2
- update to 1.4.9
  - Security fixes:
  - wnpa-sec-2011-13 A malformed IKE packet could consume excessive
    resources.
  - wnpa-sec-2011-14 A malformed capture file could result in an invalid
    root tvbuff and cause a crash. (Bug 6135) CVE-2011-3266
  - wnpa-sec-2011-15 Wireshark could run arbitrary Lua scripts. (Bug 6136)
  - Bug fixes:
  - Unable to configure zero length SNMP Engine ID. (Bug 5731)
  - H.323 RAS packets missing from packet counts in "Telephony-&gt;VoIP
    Calls" and the "Flow Graph" for the call. (Bug 5848)
  - Malformed Packet in decode for BGP-AD update. (Bug 6122)
  - BGP : AS_PATH attribute was decode wrong. (Bug 6188)
  - Fixes for SCPS TCP option. (Bug 6194)
  - Offset calculated incorrectly for sFlow extended data. (Bug 6219)
  - [Enter] key behavior varies when manually typing display filters.
    (Bug 6228)
  - Contents of pcapng EnhancedPacketBlocks with comments aren't
    displayed. (Bug 6229)
  - Misdecoding 3G Neighbour Cell Information Element in SI2quater
    message due to a coding typo. (Bug 6237)
  - Mis-spelled word "unknown" in assorted files. (Bug 6244)
  - btl2cap extended window shows wrong bit. (Bug 6257)
  - NDMP dissector incorrectly represents "ndmp.bytes_left_to_read"
    as signed. (Bug 6262)
  - ERF records with extension headers not written out correctly to
    pcap or pcap-ng files. (Bug 6265)
  - RTPS2: MAX_BITMAP_SIZE is defined incorrectly. (Bug 6276)
  - Copying from RTP stream analysis copies 1st line many times. (Bug 6279)
  - File types with no snaplen written out with a zero snaplen in pcap-ng
    files. (Bug 6289)
  - MEGACO context tracking fix - context id reuse. (Bug 6311)
  - Updated protocol support:
  - BGP, Bluetooth L2CAP, GSM A RR, H.225, IKE, MEGACO, NDMP, RTPS2, SCPS,
    sFlow, SNMP
  - New and Updated capture file suppport:
  - CommView, pcap-ng.
  - update to 1.4.8
  - Security fixes:
  - CVE-2011-2597 The Lucent/Ascend file parser was susceptible to an
    infinite loop.
  - The ANSI MAP dissector was susceptible to an infinite loop. (Bug 6044)
  - Bug fixes:
  - TCP dissector doesn't decode TCP segments of length 1. (Bug 4716)
  - Wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
  - Missing LUA function. (Bug 5006)
  - Lua API description about creating a new Tvb from a bytearray is not
    correct in wireshark's user guide. (Bug 5199)
  - sflow decode error for some extended formats. (Bug 5379)
  - White space in protocol field abbreviation causes runtime failure
    while registering Lua dissector. (Bug 5569)
  - "File not found" box uses wrong filename encoding. (Bug 5715)
  - capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too many.
    (Bug 5803)
  - Wireshark crashes if Lua contains "Pref.range()" with missing
    arguments. (Bug 5895)
  - The "range" field in Lua's "Pref.range()" serves as default while
    the "default" field does nothing. (Bug 5896)
  - Wireshark crashes when calling TreeItem:set_len() on TreeItem
    without tvb. (Bug 5941)
  - TvbRange_string(lua_State* L) call a wrong function. (Bug 5960)
  - VoIP call flow graph displays BICC APM as a BICC ANM. (Bug 5966)
  - H323 rate multiplier wrong. (Bug 6009)
  - tshark crashes when loading Lua script that contains GUI function.
    (Bug 6018)
  - 802.11 Disassociation Packet's "Reason Code" field is imprecisely
    decoded/described. (Bug 6022)
  - Wireshark crashes when setting custom column's field name with
    conditional. (Bug 6028)
  - GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
  - The SSL dissector can not resemble correctly the frames after TCP
    zero window probe packet. (Bug 6059)
  - Packet parser takes too long for this trace. (Bug 6073)
  - 802.11 Association Response Packet's "Status Code" field is
    imprecisely decoded/described. (Bug 6093)
  - Wireshark 1.6.0 and Python support: installer fails to create the
    wspy_dissectors subdirectory and . (Bug 6110)
  - Wireshark crash during RTP stream analysis. (Bug 6120)
  - Tshark custom columns: Why don't I get an error message? (Bug 6131)
  - Updated protocol support:
  - ANSI MAP, GIOP, H.323, IEEE 802.11, MSRP, RPCAP, sFlow, TCP
  - New and Updated capture file suppport:
  - Lucent/Ascend
  - update to 1.4.7
  - Security fixes:
  - Large/infinite loop in the DICOM dissector. (Bug 5876)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Diameter dictionary file could crash Wireshark.
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted snoop file could crash Wireshark. (Bug 5912)
  - David Maciejak of Fortinet's FortiGuard Labs discovered that malformed
    compressed capture data could crash Wireshark. (Bug 5908)
  - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered
    that a corrupted Visual Networks file could crash Wireshark. (Bug 5934)
  - Bug fixes:
  - AIM dissector has some endian issues. (Bug 5464)
  - Telephony-&gt;MTP3-&gt;MSUS doesn't display window. (Bug 5605)
  - Support for MS NetMon 3.x traces containing raw IPv6 ("Type 7")
    packets. (Bug 5817)
  - Service Indicator in M3UA protocol data. (Bug 5834)
  - IEC60870-5-104 protocol, incorrect decoding of timestamp type
    CP56Time2a. (Bug 5889)
  - DNP3 dissector incorrect constants AL_OBJ_FCTR_16NF _FDCTR_32NF
    _FDCTR_16NF. (Bug 5920)
  - 3GPP QoS: Traffic class is not decoded properly. (Bug 5928)
  - Wireshark crashes when creating ProtoField.framenum in Lua. (Bug 5930)
  - Fix a wrong mask to extract FMID from DECT packets dissector. (Bug 5947)
  - Incorrect DHCPv6 remote identifier option parsing. (Bug 5962)
  - Updated protocol support:
  - DICOM, IEC104, M3UA, TCP
  - New and Updated capture file suppport:
  - Network Monitor
- Drop patches (fixed upstream):
  + wireshark-1.6.2-CVE-2011-3483.patch
  + wireshark-1.6.2-CVE-2011-3360.patch
  + wireshark-1.6.2-CVE-2011-3266.patch
  + wireshark-1.4.8-CVE-2011-2698.patch
  + wireshark-1.4.8-CVE-2011-2597.patch
  + wireshark-1.2.17-CVE-2011-2175.patch
  + wireshark-1.2.17-CVE-2011-2174.patch
  + wireshark-1.2.17-CVE-2011-1959.patch
  + wireshark-1.2.17-CVE-2011-1958.patch
  + wireshark-1.2.17-CVE-2011-1957.patch
  + wireshark-nfsv4-opts.patch
- changed spec to resolve rpmlint warning regarding devel package in
  non-devel group
- changed spec to resolve rpmlint warnings regarding macro-in-comment</changelog>
<changelog author="cyliu@suse.com" date="1326801600">- update to 1.6.5
  - Security fixes:
  - wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to
    properly check record sizes for many packet capture file formats.
    (Bug 6663, bug 6666, bug 6667, bug 6668, bug 6669, bug 6670)
  - wnpa-sec-2012-02  Wireshark could dereference a NULL pointer and
    crash. (Bug 6634)
  - wnpa-sec-2012-03  The RLC dissector could overflow a buffer. (Bug 6391)
  - Bug fixes:
  - "Closing File!" Dialog Hangs. (Bug 3046)
  - Sub-fields of data field should appear in exported PDML as children
    of the data field instead of as siblings to it. (Bug 3809)
  - Incorrect time differences displayed with time reference set. (Bug 5580)
  - Wrong packet type association of SNMP trap after TFTP transfer. (Bug 5727)
  - SSL/TLS decryption needs wireshark to be rebooted. (Bug 6032)
  - Export HTTP Objects -&gt; save all crashes Wireshark. (Bug 6250)
  - Wireshark Netflow dissector complains there is no template found though
    the template is exported. (Bug 6325)
  - DCERPC EPM tower UUID must be interpreted always as little endian.
    (Bug 6368)
  - Crash if no recent files. (Bug 6549)
  - IPv6 frame containing routing header with 0 segments left calculates wrong
    UDP checksum. (Bug 6560)
  - IPv4 UDP/TCP Checksum incorrect if routing header present. (Bug 6561)
  - Incorrect Parsing of SCPS Capabilities Option introduced in response
    to bug 6194. (Bug 6562)
  - Various crashes after loading NetMon2.x capture file. (Bug 6578)
  - Fixed compilation of dumpcap on some systems (when MUST_DO_SELECT is
    defined). (Bug 6614)
  - SIGSEGV in SVN 40046. (Bug 6634)
  - Wireshark dissects TCP option 25 as an "April 1" option. (Bug 6643)
  - ZigBee ZCL Dissector reports invalid status. (Bug 6649)
  - ICMPv6 DNSSL option malformed on padding. (Bug 6660)
  - Wrong tvb_get_bits function call in packet-csn1.c. (Bug 6708)
  - [UDP] - Length Field of Pseudo Header while computing CheckSum is not
    correct. (Bug 6711)
  - pcapio.c: bug in libpcap_write_interface_description_block. (Bug 6719)
  - Memory leaks in various dissectors.
  - Bytes highlighted in wrong Byte pane when field selected in Details pane.
  - Updated Protocol Support
  - BGP, BMC CSN1, DCERPC EPM, DCP(ETSI) DMP DTLS GSM Management,
    H245 HPTEAM, ICMPv6, IEEE 802.15.4 IPSEC IPv4, IPv6,
    ISAKMP KERBEROS LDSS NFS RLC, RPC-NETLOGON RRC RTMPT SIGCOMP
    SSL SYSLOG TCP, UDP, XML ZigBee ZCL
  - New and Updated Capture File Support
  - Accellent 5Views, AIX iptrace, HP-UX nettl, I4B, Microsoft Network
    Monitor, Novell LANalyzer, PacketLogger, Pcap-ng, Sniffer, Tektronix
    K12, WildPackets {Airo,Ether}Peek.
- update to 1.6.4
  - Bug fixes:
  - Patch to fix memory leaks/errors in Lua plugin. (Bug 5575)
  - Wireshark crashes if a field of type BASE_CUSTOM is applied as a
    column. (Bug 6503)
  - Filter Expression dialog can only be opened once. (Bug 6537)
  - Wireshark crashes if compiled without GLib thread support. (Bug 6540)
  - 80211 QoS Control: Add Raw TID. (Bug 6548)
  - SNMP length check error. (Bug 6564)
  - UCP dissector bug of operation 61. (Bug 6570)
- fix bnc#741187, #741188, #741190</changelog>
<changelog author="asn@cryptomilk.org" date="1330603200">- Add known bit for Netlogon ServerAutheticate2 flags.</changelog>
<changelog author="zaitor@opensuse.org" date="1333281600">- Update to version 1.6.6:
  + wnpa-sec-2012-04: The ANSI A dissector could dereference a NULL
    pointer and crash. (Bug 6823)
  + wnpa-sec-2012-05: The IEEE 802.11 dissector could go into an
    infinite loop. (Bug 6809)
  + wnpa-sec-2012-06: The pcap and pcap-ng file parsers could crash
    trying to read ERF data. (Bug 6804)
  + wnpa-sec-2012-07: The MP2T dissector could try to allocate too
    much memory and crash. (Bug 6804)
  + The Windows installers now include GnuTLS 1.12.18, which fixes
    several vulnerabilities.
  + Bugs fixed:
  - ISO SSAP: ActivityStart: Invalid decoding the activity
    parameter as a BER Integer. (Bug 2873)
  - Forward slashes in URI need to be converted to backslashes if
    WIN32. (Bug 5237)
  - Character echo pauses in Capture Filter field in Capture
    Options. (Bug 5356)
  - Some PGM options are not parsed correctly. (Bug 5687)
  - dumpcap crashes when capturing from pipe to a pcap-ng file
    (e.g., when passing data from CACE Pilot to Wireshark). (Bug
    5939)
  - Unable to rearrange columns in preferences on Windows. (Bug
    6077) (Note: this bug still affects the 64-bit package)
  - No error for UDP/IPv6 packet with zero checksum. (Bug 6232)
  - Wireshark installer doesn't add access_bpf in 10.5.8. (Bug
    6526)
  - Corrupted Diameter dictionary file that crashes Wireshark.
    (Bug 6664)
  - packetBB dissector bug: More than 1000000 items in the tree
    possible infinite loop. (Bug 6687)
  - ZEP dissector: Timestamp not always displayed correctly.
    Fractional seconds never displayed. (Bug 6703)
  - GOOSE Messages don't use the length field to perform the
    dissection. (Bug 6734)
  - Ethernet traces in K12 text format sometimes give bogus
    "malformed frame" errors and other problems. (Bug 6735)
  - max_ul_ext isn't printed/decoded to the packet details log in
    GTP protocol packet. (Bug 6761)
  - non-IPP packets to or from port 631 are dissected as IPP.
    (Bug 6765)
  - lua proto registration fails for uppercase proto /
    g_ascii_strdown problem. (Bug 6766)
  - no menu item Fle-&gt;Export-&gt;SSL Session Keys in GTK. (Bug 6813)
  - IAX2 dissector reads past end of packet for unknown IEs. (Bug
    6815)
  - TShark 1.6.5 immediately crashes on SSL decryption (every
    time). (Bug 6817)
  - USB: unknown GET DESCRIPTOR response triggers assert failure.
    (Bug 6826)
  - IEEE1588 PTPv2 over IPv6. (Bug 6836)
  - Patch to fix DTLS decryption. (Bug 6847)
  - Expression... dialog crash. (Bug 6891)
  - display filter "gtp.msisdn" not working. (Bug 6947)
  - Multiprotocol Label Switching Echo - Return Code: Reserved(5)
    (Bug 6951)
  - ISAKMP : VendorID CheckPoint : Malformed Packet. (Bug 6972)
  - Adding a Custom HTTP Header Field with a trailing colon
    causes wireshark to immediately crash (and crash upon
    restart). (Bug 6982)
  - Radiotap dissector lists a bogus "DBM TX Attenuation" bit.
    (Bug 7000)
  - MySQL dissector assertion. (Ask 8649)
  - Radiotap header format data rate alignment issues. (Ask 8649)</changelog>
<changelog author="reddwarf@opensuse.org" date="1334404800">- Update to version 1.6.7:
  + Bugs fixed:
  - Malformed Packets H263-1996 (RFC2190). (Bug 6996)
  - Wireshark could crash while trying to open an rpcap: URL.
    (Bug 6922)
  + Updated H.263 Protocol Support</changelog>
<changelog author="andreas.stieger@gmx.de" date="1337688000">- adjust wireshark-corosync-packet-dissector.patch for source changes
- update to upstream 1.6.8
  + security fixes
  * wnpa-sec-2012-08 / CVE-2012-2392
    Infinite and large loops in the ANSI MAP, ASF, BACapp,
    Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 dissectors
    have been fixed. Discovered by Laurent Butti. (Bugs 6805,
    7118, 7119, 7120, 7121, 7122, 7124, 7125)
  * wnpa-sec-2012-09 / CVE-2012-2393
    The DIAMETER dissector could try to allocate memory improperly
    and crash. (Bug 7138)
  * wnpa-sec-2012-10 / CVE-2012-2394
    Wireshark could crash on SPARC processors due to misaligned
    memory. Discovered by Klaus Heckelmann. (Bug 7221)
  + bug fixes
  * User-Password - PAP decoding passwords longer than 16 bytes.
    (Bug 6779)
  * The MSISDN is not seen correctly in GTP packet. (Bug 7042)
  * Wireshark doesn't calculate the right IPv4 destination using
    source routing options when bad options precede them. (Bug
    7043)
  * BOOTP dissector issue with DHCP option 82 - suboption 9. (Bug
    7047)
  * MPLS dissector in 1.6.7 and 1.7.1 misdecodes some MPLS CW
    packets. (Bug 7089)
  * ANSI MAP infinite loop. (Bug 7119)
  * HCIEVT infinite loop. (Bug 7122)
  * Wireshark doesn't decode NFSv4.1 operations. (Bug 7127)
  * LTP infinite loop. (Bug 7124)
  * Wrong values in DNS CERT RR. (Bug 7130)
  * Megaco parser problem with LF in header. (Bug 7198)
  * OPC UA bytestring node id decoding is wrong. (Bug 7226)
  + Updated Protocol Support
    ANSI MAP, ASF, BACapp, Bluetooth HCI, DHCP, DIAMETER, DNS, GTP,
    IEEE 802.11, IEEE 802.3, IPv4, LTP, Megaco, MPLS, NFS, OPC UA,
    RADIUS
  + New and Updated Capture File Support
    5View, CSIDS, pcap, pcap-ng</changelog>
<changelog author="opensuse@sukimashita.com" date="1338724800">- Add all known headers to devel package in order to make it
  actually useable and allow building dissectors externally</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340366400">- update to upstream 1.8.0:
  * supports capturing from multiple interfaces at once.
  * add, edit, and save packet and capture file annotations.
  * pcap-ng file format is default
  * Decryption key management for IEEE 802.11, IPsec, and ISAKMP
    is easier.
  * GeoIP IPv6 databases are now supported.
  * large number of protocol dissectors added and updated
  * support for many capture file formats added and updated
  For a full list refer to the release notes:
  https://www.wireshark.org/docs/relnotes/wireshark-1.8.0.html
- drop wireshark-corosync-packet-dissector.patch, no longer compiles
  even after updating
- drop wireshark-1.6.5-netlogon-aes.patch, applied upstream
- drop idl2wrs command from -devel package
- update header files in include.filelist
- refresh wireshark-1.2.0-disable-warning-dialog.patch
- refresh wireshark-1.2.0-geoip.patch
- add wireshark-1.8.0-gmodule.patch to fix linking in factory</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343131200">- update to upstream 1.8.1 (bnc#772738)
  + vulnerabilities fixed:
  * The PPP dissector could crash
    (wnpa-sec-2012-11 CVE-2012-4048)
  * The NFS dissector could use excessive amounts of CPU
    (wnpa-sec-2012-12 CVE-2012-4049)
  + bug fixes:
  * Wireshark crashes on bootp filter
  * Wireshark &gt; 1.4 does not correctly read Association ID for PS
    Poll packets
  * Radius-EAP broken since 1.8.0 release
  * SNMP incorrectly marks SNMPv3 "discovery" packet as malformed
  * Widgets are not properly expanded in GTK3
  * Find Next Mark duplicated on Edit Menu
  * DVB-CI/CI+: fix offset error in operator_info apdu
  * Unable to correctly identify IEC 61850 MMS packets
  * WinPcap doesn't install if vcredist_x64 requires reboot
- remove wireshark-1.8.0-gmodule.patch, fixed upstream</changelog>
<changelog author="andreas.stieger@gmx.de" date="1345032000">- update to upstream 1.8.2 (bnc#776083)
  + vulnerabilities fixed:
  * The DCP ETSI dissector could trigger a zero division.
    (wnpa-sec-2012-13 CVE-2012-4285)
  * The MongoDB dissector could go into a large loop.
    (wnpa-sec-2012-14 CVE-2012-4287)
  * The XTP dissector could go into an infinite loop.
    (wnpa-sec-2012-15 CVE-2012-4288)
  * The ERF dissector could overflow a buffer.
    (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295)
  * The AFP dissector could go into a large loop.
    (wnpa-sec-2012-17 CVE-2012-4289)
  * The RTPS2 dissector could overflow a buffer.
    (wnpa-sec-2012-18 CVE-2012-4296)
  * The GSM RLC MAC dissector could overflow a buffer.
    (wnpa-sec-2012-19 CVE-2012-4297)
  * The CIP dissector could exhaust system memory.
    (wnpa-sec-2012-20 CVE-2012-4291)
  * The STUN dissector could crash.
    (wnpa-sec-2012-21 CVE-2012-4292)
  * The EtherCAT Mailbox dissector could abort.
    (wnpa-sec-2012-22 CVE-2012-4293)
  * The CTDB dissector could go into a large loop.
    (wnpa-sec-2012-23 CVE-2012-4290)
  * The pcap-ng file parser could trigger a zero division.
    (wnpa-sec-2012-24 CVE-2012-4286)
  * The Ixia IxVeriWave file parser could overflow a buffer.
    (wnpa-sec-2012-25 CVE-2012-4298)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.html
- adjust wireshark-1.2.0-disable-warning-dialog.patch for moved lines</changelog>
<changelog author="cfarrell@suse.com" date="1346414400">- license update: GPL-2.0+ and GPL-3.0+
  According to the COPYING file the PIDL utility (standalone tool) is
  GPL-3.0+ licensed</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to upstream 1.8.3 (bnc#783275)
  + vulnerabilities fixed:
  * The HSRP dissector could go into an infinite loop.
    (wnpa-sec-2012-26 CVE-2012-5237)
  * The PPP dissector could abort.
    (wnpa-sec-2012-27 CVE-2012-5238)
  * Martin Wilck discovered an infinite loop in the DRDA dissector.
    (wnpa-sec-2012-28 CVE-2012-5239 CVE-2012-3548 bnc#778000)
  * Laurent Butti discovered a buffer overflow in the LDP dissector.
    (wnpa-sec-2012-29 CVE-2012-5240)
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.3.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1352894400">- for openSUSE 12.2 and later, build against lua51-devel instead
  of lua-devel for Lua support (bnc#780669)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354190400">- update to 1.8.4 [bnc#792005]
  + vulnerabilities fixed:
  * Wireshark could leak potentially sensitive host name
    resolution information when working with multiple pcap-ng
    files.
    wnpa-sec-2012-30 CVE-2012-5592
  * The USB dissector could go into an infinite loop.
    wnpa-sec-2012-31 CVE-2012-5593
  * The sFlow dissector could go into an infinite loop.
    wnpa-sec-2012-32 CVE-2012-5594
  * The SCTP dissector could go into an infinite loop.
    wnpa-sec-2012-33 CVE-2012-5595
  * The EIGRP dissector could go into an infinite loop.
    wnpa-sec-2012-34 CVE-2012-5596
  * The ISAKMP dissector could crash.
    wnpa-sec-2012-35 CVE-2012-5597
  * The iSCSI dissector could go into an infinite loop.
    wnpa-sec-2012-36 CVE-2012-5598
  * The WTP dissector could go into an infinite loop.
    wnpa-sec-2012-37 CVE-2012-5599
  * The RTCP dissector could go into an infinite loop.
    wnpa-sec-2012-38 CVE-2012-5600
  * The 3GPP2 A11 dissector could go into an infinite loop.
    wnpa-sec-2012-39 CVE-2012-5601
  * The ICMPv6 dissector could go into an infinite loop.
    wnpa-sec-2012-40 CVE-2012-5602
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add wireshark-suidflags.patch: Allow to pass SUID_{C,LD}FLAGS to
  introduce -fPIE -pie as needed for suid binaries
- Add libtool BuildRequires and call to autoreconf, as above patch
  touches the build system.
- Export SUID_{C,LD}FLAGS with appropriate flags.</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- build with gtk3 on 11.4+
- disable zlib makes a sense for 1.2.5 only
- turn some features on (python, gcrypt, gnutls, plugins dir)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1359633600">- update to 1.8.5 [bnc#801131]
  + vulnerabilities fixed:
  * Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI
    DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS,
    SDP, and SIP dissectors
    wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574
    CVE-2013-1575 CVE-2013-1576 CVE-2013-1577 CVE-2013-1578
    CVE-2013-1579 CVE-2013-1580 CVE-2013-1581
  * The CLNP dissector could crash
    wnpa-sec-2013-02 CVE-2013-1582
  * The DTN dissector could crash
    wnpa-sec-2013-03 CVE-2013-1583 CVE-2013-1584
  * The MS-MMC dissector (and possibly others) could crash
    wnpa-sec-2013-04 CVE-2013-1585
  * The DTLS dissector could crash
    wnpa-sec-2013-05 CVE-2013-1586
  * The ROHC dissector could crash
    wnpa-sec-2013-06 CVE-2013-1587
  * The DCP-ETSI dissector could corrupt memory
    wnpa-sec-2013-07 CVE-2013-1588
  * The Wireshark dissection engine could crash
    wnpa-sec-2013-08 CVE-2013-1589
  * The NTLMSSP dissector could overflow a buffer
    wnpa-sec-2013-09 CVE-2013-1590
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.5.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1362657600">- update to 1.8.6 [bnc#807942]
  + vulnerabilities fixed:
  * The TCP dissector could crash.
    wnpa-sec-2013-10 CVE-2013-2475
  * The HART/IP dissectory could go into an infinite loop.
    wnpa-sec-2013-11 CVE-2013-2476
  * The CSN.1 dissector could crash.
    wnpa-sec-2013-12 CVE-2013-2477
  * The MS-MMS dissector could crash.
    wnpa-sec-2013-13 CVE-2013-2478
  * The MPLS Echo dissector could go into an infinite loop.
    wnpa-sec-2013-14 CVE-2013-2479
  * The RTPS and RTPS2 dissectors could crash.
    wnpa-sec-2013-15 CVE-2013-2480
  * The Mount dissector could crash.
    wnpa-sec-2013-16 CVE-2013-2481
  * The AMPQ dissector could go into an infinite loop.
    wnpa-sec-2013-17 CVE-2013-2482
  * The ACN dissector could attempt to divide by zero.
    wnpa-sec-2013-18 CVE-2013-2483
  * The CIMD dissector could crash.
    wnpa-sec-2013-19 CVE-2013-2484
  * The FCSP dissector could go into an infinite loop.
    wnpa-sec-2013-20 CVE-2013-2485
  * The RELOAD dissector could go into an infinite loop.
    wnpa-sec-2013-21 CVE-2013-2486 CVE-2013-2487
  * The DTLS dissector could crash.
    wnpa-sec-2013-22 CVE-2013-2488
  + Further bug fixes and updated protocol support as listed in:
    http://www.wireshark.org/docs/relnotes/wireshark-1.8.6.html</changelog>

</package>
<package pkgid="28f71d10c4f6bf9a7023cc3136e28662817d06c7d51d91474e3bdec7bc0f6a81" name="firebird-32bit" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="e66a010a4bc324b3a6042de094cfcefd7670b336831b2b8ef0bccef5c9871c91" name="krb5-32bit" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="fd0dee6ae032aea50b7c1eef1e314f08c61ecbc0f53e7b9b5bbcc1bef597f06e" name="krb5-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.10.2" rel="10.5.1"/>

<changelog author="mc@suse.de" date="1314100800">- use --without-pam to build krb5-mini</changelog>
<changelog author="mc@suse.de" date="1318852800">- fix kdc remote denial of service
  (MITKRB5-SA-2011-006, bnc#719393)
  CVE-2011-1527, CVE-2011-1528, CVE-2011-1529</changelog>
<changelog author="rhafer@suse.de" date="1321617600">- fix minor error messages for the IAKERB GSSAPI mechanism
  (see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC HA feature introduced with implementing KDC poll
  (RT#6951, bnc#731648)</changelog>
<changelog author="mc@suse.de" date="1321876800">- fix KDC null pointer dereference in TGS handling
  (MITKRB5-SA-2011-007, bnc#730393)
  CVE-2011-1530</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config, very old work around</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.de" date="1328011200">- fix license in krb5-mini</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1330257600">- add autoconf macro to devel subpackage</changelog>
<changelog author="mc@suse.de" date="1338984000">- update to version 1.10.2
  obsolte patches:
  * krb5-1.7-nodeplibs.patch
  * krb5-1.9.1-ai_addrconfig.patch
  * krb5-1.9.1-ai_addrconfig2.patch
  * krb5-1.9.1-sendto_poll.patch
  * krb5-1.9-canonicalize-fallback.patch
  * krb5-1.9-paren.patch
  * krb5-klist_s.patch
  * krb5-pkinit-cms2.patch
  * krb5-trunk-chpw-err.patch
  * krb5-trunk-gss_delete_sec.patch
  * krb5-trunk-kadmin-oldproto.patch
  * krb5-1.9-MITKRB5-SA-2011-006.dif
  * krb5-1.9-gss_display_status-iakerb.patch
  * krb5-1.9.1-sendto_poll2.patch
  * krb5-1.9.1-sendto_poll3.patch
  * krb5-1.9-MITKRB5-SA-2011-007.dif
- Fix an interop issue with Windows Server 2008 R2 Read-Only Domain
  Controllers.
- Update a workaround for a glibc bug that would cause DNS PTR queries
  to occur even when rdns = false.
- Fix a kadmind denial of service issue (null pointer dereference),
  which could only be triggered by an administrator with the "create"
  privilege.  [CVE-2012-1013]
- Fix access controls for KDB string attributes [CVE-2012-1012]
- Make the ASN.1 encoding of key version numbers interoperate with
  Windows Read-Only Domain Controllers
- Avoid generating spurious password expiry warnings in cases where
  the KDC sends an account expiry time without a password expiry time
- Make PKINIT work with FAST in the client library.
- Add the DIR credential cache type, which can hold a collection of
  credential caches.
- Enhance kinit, klist, and kdestroy to support credential cache
  collections if the cache type supports it.
- Add the kswitch command, which changes the selected default cache
  within a collection.
- Add heuristic support for choosing client credentials based on
  the service realm.
- Add support for $HOME/.k5identity, which allows credential
  choice based on configured rules.</changelog>
<changelog author="mc@suse.de" date="1339070400">- fix gcc47 issues</changelog>
<changelog author="coolo@suse.com" date="1339588800">- fix %files section for krb5-mini</changelog>
<changelog author="mc@suse.de" date="1349438400">- add systemd service files for kadmind, krb5kdc and kpropd
- add sysconfig templates for kadmind and krb5kdc</changelog>
<changelog author="coolo@suse.com" date="1350129600">- do not require systemd in krb5-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- buildrequire systemd by pkgconfig provide to get systemd-mini</changelog>
<changelog author="coolo@suse.com" date="1350388800">- revert the -p usage in %postun to fix SLE build</changelog>
<changelog author="lchiquitto@suse.com" date="1358856000">- krb5-1.10-spin-loop.patch: fix spin-loop bug in k5_sendto_kdc
  (bnc#793336)</changelog>
<changelog author="mc@suse.de" date="1359115200">- package missing file (bnc#794784)</changelog>
<changelog author="mc@suse.de" date="1362398400">- fix PKINIT null pointer deref
  CVE-2013-1415 (bnc#806715)
  bug-806715-CVE-2013-1415-fix-PKINIT-null-pointer-deref.dif</changelog>
<changelog author="mc@suse.de" date="1362571200">- fix PKINIT null pointer deref in pkinit_check_kdc_pkid()
  CVE-2012-1016 (bnc#807556)
  bug-807556-CVE-2012-1016-fix-PKINIT-null-pointer-deref2.dif</changelog>

</package>
<package pkgid="5557e325c7901814f8bd9d94c303652b7ebfeca5ad2483d8c458ab71411b0cf0" name="libfbclient2-32bit" arch="x86_64">
    <version epoch="0" ver="2.5.2.26539" rel="2.5.1"/>

<changelog author="mkubecek@suse.cz" date="1326715200">- update to upstream version 2.5.2.26417
  * add system indices to avoid full table scans on system tables
  * CORE-3722: IS NOT DISTINCT FROM NULL doesn't use index
  * CORE-3727: Support C preprocessor flags in firebird build system
  * CORE-3599: Don't allow to drop RDB$ADMIN role
- removed obsolete firebird-2.5.2-libs.patch (in upstream now)</changelog>
<changelog author="mkubecek@suse.cz" date="1327924800">- update to upstream version 2.5.2.26424
  * CORE-3732: Segfault when closing attachment to database
  * CORE-3730: isc_dsql_exec_immed2() loses input parameter value with
    RETURNING clause
  * CORE-3733: GBAK fails to fix system generators while restoring
  * CORE-3736: WITH LOCK clause is allowed for users with read-only
    rights on some table, thus blocking others from updating this table
  * Stop db triggers in qli
- declare BuildRoot only when needed (&lt; 1130)
- define version in one place rather than two</changelog>
<changelog author="mkubecek@suse.cz" date="1329307200">- update to upstream version 2.5.2.26425
  * CORE-3750: Error increasing limits on posix</changelog>
<changelog author="mkubecek@suse.cz" date="1330516800">- update to upstream version 2.5.2.26429
  * CORE-3761: Conversion error when using a blob as an argument
    for the EXCEPTION statement
  * CORE-3778: AV at connection shutdown
  * CORE-1997: Broken foreign key handling for multi-segmented
    index using multi-level collations
  * CORE-2457: UNICODE_CI internal gds software consistency check</changelog>
<changelog author="mkubecek@suse.cz" date="1331553600">- update to upstream version 2.5.2.26436
  * CORE-2457: UNICODE_CI internal gds software consistency
    check
  * CORE-3762: gsec returns 0 return code on some errors
  * CORE-3649: gbak deletes backup file even if error happens
    when it's already successfully closed
  * CORE-3777: Conversion error from string when using GROUP BY
  * CORE-3721: Multiuser server startup (/etc/init.d) script
    picks up the ISC_ variables if set
- remove dependency of firebird-devel on firebird</changelog>
<changelog author="mkubecek@suse.cz" date="1333368000">- update to upstream version 2.5.2.26456
  * CORE-2286: Selecting from MON$CALL_STACK within a Trigger or SP
    sometimes return 0 rows
  * CORE-3569: CHAR(32767) present in XSQLVAR with length 32765
  * CORE-3195: Concatenation to CHAR(32766/7) impossible
  * CORE-3625: MON$IO_STATS doesn't report page writes performed
    asynchronously (at the AST level)
  * CORE-3092: ROW_COUNT is not cleared before the singleton INSERT
    statement
  * CORE-1992: bad BLR -- invalid stream for union select
  * untracked AV due to CORE-3649
  * Undo patch for CORE-3468
  * CORE-3791: Performance degrades when actively working with
    databases bigger than the available RAM amount
  * CORE-3770: fbtracemgr loads CPU up to ~55% when no activity is
    present
  * CORE-3799: with caller privileges option don't work with
    autonomous transaction option
  * CORE-3801: Warnings could be put twice in status-vector
  * CORE-3802: Firebird runs out of memory while restoring database
    backup</changelog>
<changelog author="mkubecek@suse.cz" date="1334577600">- update to upstream version 2.5.2.26467
  * CORE-3806: Wrong data returned if a sub-query or a computed
    field refers to the base table in the ORDER BY clause
  * CORE-3807: Error "Invalid expression in the select list" can be
    unexpectedly raised if a string literal is used inside a GROUP
    BY clause in a multi-byte connection
  * CORE-3686: Incorrect (zero) values are reported for "acquire
    blocks" and "mutex wait" counters in the fb_lock_print output
  * CORE-3810 : isql: zero divide + coredump when use "-pag 0"
    command switch &amp; set heading on inside .sql script
  * Rolled back the optimization committed recently due to the
    found regressions
  * CORE-3812 : Connection lost to database during massive dropping
    and altering primary keys of tables
  * Do not ignore possible OS level errors even if they seem
    unlikely to happen</changelog>
<changelog author="mkubecek@suse.cz" date="1335960000">- update to upstream version 2.5.2.25472
  * CORE-3819: Wrong service name to port address resolution in
    database connection string
  * CORE-3825: If an autocommit transaction (i.e. transaction
    started with isc_tpb_autocommit option) run DDL using EXECUTE
    STATEMENT it will produce a bugcheck 287 (Too many savepoints)
  * Make the conf. parameter DummyPacketInterval more accurate
  * CORE-3834: Usage of a NATURAL JOIN with a derived table crashes
    the server
- temporary fix for "stop" branch of init script</changelog>
<changelog author="mkubecek@suse.cz" date="1336478400">- firebird-2.5.2-isqlalign.patch:
  replace locale based patch with backport from firebird 3.0
- firebird-2.5.2-gpidfile.patch:
  allow creating a pidfile for fbguard as well
- firebird-2.5.2-init.patch:
  use killproc and guard pidfile for "stop" branch</changelog>
<changelog author="mkubecek@suse.cz" date="1336996800">- update to upstream version 2.5.2.25481
  * CORE-3539: TRACE: add ability for logging ERRORs that occur in
    runtime (lock conflicts, PK/UK/FK violations et al)
  * Trace errors raised by failed ON TRANSACTION ROLLBACK and ON
    DISCONNECT triggers
  * CORE-3598: TRACE: add statistics of actions that were after
    transaction finished
  * CORE-3814: SuperClassic server crashes when performing a
    database shutdown (FW=OFF)
  * fix regression introduced by patch for CORE-3777
  * CORE-3844: Validation not detects one specific case of index
    corruption
  * CORE-3841: Corrupted database after inserting rows
  * CORE-3839: Values disappearing from index
  * CORE-3845 : Interruption of 'heavy query' leads to 0 ms (zero
    duration) in it`s statistics in trace log</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- Switching to new Firebird version (2.5) and spec file. This
  obsoletes the previous changes file from version 2.1.</changelog>
<changelog author="mkubecek@suse.cz" date="1337342400">- spec file formatting
- add copyright to spec file</changelog>
<changelog author="mkubecek@suse.cz" date="1337947200">- update to upstream version 2.5.2.25488
  * CORE-3611: Wrong data while retrieving from CTEs (or derived
    tables) with same column names
  * CORE-3557: AV in engine when preparing query against dropping
    table (a post-fix)
  * add interpreter specification to generated scripts
  * fix broken isql history with libedit 3.0
  * CORE-3612: send errors to stderr
- firebird-2.5.1-shebang.patch:
  delete (committed to upstream)
- remove extern/SfIO from the source tarball: while it is probably
  covered by an open source license (EPL), the file stdio.h itself
  contains only an unfriendly copyright notice without any
  reference to the license; as it is needed only on Solaris, it
  seems easier to simply remove it
- use standardized tags for licence</changelog>
<changelog author="mkubecek@suse.cz" date="1338724800">- update to upstream version 2.5.2.25492
  * CORE-3855: Blobs, inserted into GLOBAL TEMPORARY TABLE ON
    COMMIT DELETE ROWS, could be placed into newly allocated
    pages even if there is enough free place on some existing
    data page
  * isql: fix output if charset is different from locale
  * Backported fix of timed semaphores in 32-bit build
- firebird-2.5.2-isqlalign.patch:
  refresh
- firebird-2.5.2-isqllocale.patch:
  backported isql fix of output if locale different from charset
- firebird-2.5.2-isqlwidth.patch:
  backported fix for buffer overflow in isql if column width set
  wider that its natural size</changelog>
<changelog author="mkubecek@suse.cz" date="1338984000">- update to upstream version 2.5.2.25494
  * Rolled back the ODS level solution for CORE-2709 as it causes
    cross-version compatibility issues (CORE-3853) as well as
    functional regressions (CORE-3675). Another solution is likely
    to be committed instead.
  * CORE-3769: The message 'Unknown tag (4) in isc_svc_query()
    results' appears when fbtracemgr is interrupted by Ctrl-C</changelog>
<changelog author="mkubecek@suse.cz" date="1342958400">- firebird-2.5.2-runlevel.patch:
  don't start the daemon in runlevel 2
- add README.SUSE</changelog>
<changelog author="dvaleev@suse.com" date="1343217600">- add libatomic-ops-devel on non x86 arches
- set libdir on powerpc correctly</changelog>
<changelog author="mkubecek@suse.cz" date="1352635200">- update to upstream version 2.5.2.26539 (2.5.2 final)
  * Optimizer level solution for CORE-2790/CORE-3449
  * CORE-2666: Make it possible to use API to do remote
    backups/restores
  * backup state lock should be released at latch timeout, else
    lock state accounting becomes inconsistent
  * CORE-3873: Server crashes while switching to the shadow if the
    disk I/O fault happens while flushing the cache
  * CORE-3860: Trace API: Faulty database filter crashes server
  * CORE-3875: GBak does not check correctly parameters and backups
    random database with -B ":"
  * CORE-3879: Make fb_lock_print a bit more handy
  * CORE-3656: Support for sweep information in Trace API
  * CORE-2668: Write note into log when automatic sweep is started
  * Enabled per-table runtime stats for sweeper (necessary for
    CORE-3656)
  * CORE-3884: Server crashes on preparing empty query when trace
    is enabled
  * CORE-3238: Makes GEN_UUID return a compliant RFC-4122 binary
    UUID
  * CORE-3887: CHAR_TO_UUID and UUID_TO_CHAR works different in
    big/little endian architectures - problem similar to CORE-2898
  * CORE-3895: High memory usage when PSQL code SELECT's from
    stored procedure which modified some data
  * Fixed the server crash in Stack::assign()
  * CORE-3902: Derived fields may not be optimized via an index
  * Fixed the broken (working as no-op) sweep in SuperServer
  * Use better name from trunk for CORE-3911
  * Restored the ODS level compatibility with v2.5.1 index keys,
    while using the "old good" index key format in new indices. It
    allows to claim that CORE-3675 and CORE-3853 are fixed (after
    migration via backup/restore) but still operate almost
    correctly with keys created in v2.5.1.
  * CORE-3912: segfault in superclassic
  * Better diagnostic (CORE-3786)
- firebird-2.5.2-icu49.patch:
  fix broken unicode collations (bnc#789171, CORE-3946)</changelog>
<changelog author="coolo@suse.com" date="1359115200">- fix license string</changelog>
<changelog author="mkubecek@suse.cz" date="1362744000">- firebird-2.5.2-CORE-4058.patch:
  fix remote stack overflow (bnc#808268, CVE-2013-2492)</changelog>

</package>
<package pkgid="b8bf291b9f0440c0442ab42e6dbabdd88b63fac53b7069c4b750b0a580c2ba4c" name="perl-32bit" arch="x86_64">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="beb7107d3c724632637078363987b9ebdbbb242af4637e20373eb0b1960517aa" name="perl-base-32bit" arch="x86_64">
    <version epoch="0" ver="5.16.2" rel="2.5.1"/>

<changelog author="coolo@novell.com" date="1291032000">- simplify macro logic a bit</changelog>
<changelog author="coolo@novell.com" date="1291118400">- added a new macro %perl_requires</changelog>
<changelog author="mls@suse.de" date="1295006400">- update to perl-5.12.3-RC1
  * bug fix only release
  * lvalue sub return values are now COW
- fix CGI injection bugs, CVE-2010-2761, CVE-2010-4410,
  CVE-2010-4411 [bnc#657343]</changelog>
<changelog author="lnussel@suse.de" date="1296216000">- Suggest instead of Recommend perl-doc. It's not useful on a
  end-user system and saves 20MB on a minimal installation.</changelog>
<changelog author="mls@suse.de" date="1297684800">- update to perl-5.12.3 final
- remove obsolete perl-cgi-injection.diff
- remove obsolete perl-constprint.diff</changelog>
<changelog author="mls@suse.de" date="1298462400">- versionify perl-Test-Simple provides/obsoletes</changelog>
<changelog author="mls@suse.de" date="1305547200">- update to 5.14.0
  * unicode version 6.0 is now supported (mostly)
  * any unsigned value can be encoded as a character
  * some regexp enhancements, e.g. s///r option
  * array and hash container functions accept references
  * package block syntax
  * overridable tie functions
  * assignment to $0 works again
  * improved IPv6 support in the Socket module
- fix regexp crash in reg_numbered_buff_fetch [bnc#676086]
  [CVE-2010-4777]
- move unicode files from perl-doc to perl again [bnc#678877]
- remove feedback@suse.de mail address, it no longer exists
  [bnc#657625]
- support unversioned site_perl include directory</changelog>
<changelog author="mls@suse.de" date="1305633600">- Test::Simple is actually 0.98</changelog>
<changelog author="mls@suse.de" date="1306411200">- backport CBuilder fix that keeps it from overwriting ccflags
  from the perl config if CCFLAGS is set in the environment</changelog>
<changelog author="mls@suse.de" date="1308312000">- update to 5.14.1
  - B::Deparse has been upgraded
  - Pod::Perldoc has been upgraded
  - given, when and default are now listed in perlfunc
  - multiple other doc fixes and clarifications
  - several bug fixes</changelog>
<changelog author="mls@suse.de" date="1319544000">- update to 5.14.2
  * calling bsd_glob with GLOB_ALTDIRFUNC no longer segfaults
  * a heap overflow in decode_xs was fixed
  * a memory leak in caller() was fixed
  * modules were updated to their latest version
  * several other bug fixes, see perldelta</changelog>
<changelog author="mls@suse.de" date="1326456000">- bring back NDBM_File [bnc#732929]</changelog>
<changelog author="coolo@suse.com" date="1333368000">- correct license statement</changelog>
<changelog author="mls@suse.de" date="1337774400">- update to 5.16.0
  * new __SUB__ token to reference current sub
  * more consistent eval
  * ties can now be weakended
  * supports (almost) unicode 6.1
  * proper supports for unicode in symbol names
  * new foldcase function fc()
  * continue no longer requires the switch feature
  * removed LinuxThreads hack for $$ and getppid
  * performance optimizations</changelog>
<changelog author="coolo@suse.com" date="1338379200">- provide a higher version for Module::Build to calm down rpm</changelog>
<changelog author="coolo@suse.com" date="1339502400">- update perl-base file list</changelog>
<changelog author="coolo@suse.com" date="1346760000">- update to 5.16.1
  * an off-by-two error in Scalar-List-Util has been fixed
  * many perl modules updated</changelog>
<changelog author="opensuse@dstoecker.de" date="1352894400">- fix version for Module::Build obsoletes, so installing newer version is possible</changelog>
<changelog author="coolo@suse.com" date="1353067200">- update to 5.16.2
  * &lt;Module::CoreList&gt; has been upgraded from version 2.70 to version 2.76
  Perl 5.16.2 represents approximately 2 months of development since Perl
  5.16.1 and contains approximately 740 lines of changes across 20 files
  from 9 authors.</changelog>
<changelog author="mls@suse.de" date="1361880000">- perl-rehash.diff: fix rehash DoS [bnc#804415] [CVE-2013-1667]
- perl-cgi-cr-improve.diff: improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]
- perl-maketext.diff: sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329]</changelog>

</package>
<package pkgid="197b536063e808881d53359e928a203b09e868cffc9301bae001d8374d12faeb" name="libopenal0" arch="x86_64">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="72e8dd8259efd9a384dd08074cbb3ba4c7a8351d640b68b6a74b06535c8e6f40" name="libopenal1" arch="x86_64">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="842c09dad184eefa603556dae60ec2fe86d80b31d628ab5db3b45d9112c7f3de" name="microcode_ctl" arch="x86_64">
    <version epoch="0" ver="1.17" rel="142.5.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1275134400">- merge both Fedora and Debian improvements, most notably:
  * microcode.dat is now considered firmware, and installed in /lib/firmware
  * package no longer includes an init script microcode is loaded
    using udev rules.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275307200">- udev rules must live in %{_sysconfdir} otherwise it wont work.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1275307200">- udev rules back into /lib/udev ,as suggested by Kay</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1285070400">- Update Intel microcode to version 20100914, vendor
  does not provide information regarding what it fixes.</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1292760000">- Update microcode to 20101123, Intel does not disclose
  what this fixes.</changelog>
<changelog author="trenn@novell.com" date="1295352000">- Revive microcode.ctl service as 2.6.37 does not throw cpu add
  uevents. This is a workaround for 11.4 and will get reverted
  as soon as we go for 2.6.38 where cpu driver autoloading patches
  are included.
- Service will be forced to be enabled on all Intel and all
  AMD new than fam 10h.
- Add AMD microcode patch and logic to get it loaded</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305028800">- microcode.init, do not load microcode on Virtual Machines
  ugly error messages shown in syslog otherwise.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306065600">- Open all FD with O_CLOEXEC</changelog>
<changelog author="aj@suse.de" date="1309089600">- Update microcode to 20110428, Intel does not disclose
  what this fixes.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1318334400">- Update microcode to 20110915, Intel does not disclose
  what this fixes.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1321963200">- Add a systemd.service in the meanwhile we sort out
  if this has to be automatically handled by the kernel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323777600">- Update to microcode 20111110
- First steps for autoloading, currently only working with systemd
  * add script that generates microcode in a form understanable
    by the kernel.
  * add microcode.conf to modules-load.d so the module is
    loaded at boot with systemd which in turn will load
    updated microcode automatically.
    The kernel will in the near future autoload the module when
    a supported CPU is detected (WIP)
  * Axe all init scripts and systemd service files. this has
    to be handled in udev/kernel. (WIP)</changelog>
<changelog author="jeffm@suse.com" date="1335268800">- Update AMD microcode to 2012-01-17.
  - Autoloading on fam15 and newer have a _famXX suffix, which is
    causing warnings during boot on new systems (bnc#758499).</changelog>
<changelog author="cfarrell@suse.com" date="1338897600">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format</changelog>
<changelog author="crrodriguez@opensuse.org" date="1339243200">- Microcode autoload available in recent kernels is not
  very useful without this package, use proper Supplements
  to ensure it gets installed in the supported machines</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340193600">- Update to microcode 20120606, as usual, there is no information
  about the problems that has been fixed.</changelog>
<changelog author="trenn@suse.de" date="1349179200">- Update to Intel microcode 20120606-v2.
  An fixed version of the previous released one.</changelog>
<changelog author="trenn@suse.de" date="1350561600">- Update to latest AMD microcode version: 2012-01-17</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351252800">- Drop systemd units that loaded the microcode module
  it is loaded automatically nowdays.
- reload the microcode on pacakge update.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1363176000">- bnc#809348
- Update microcode to version 20130222
- No changelog available.</changelog>

</package>
<package pkgid="4ba74bde08bb62c358fe79a54d7f785ad5156041198e311db6935c39274c97fa" name="openal-soft" arch="x86_64">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="f86033a258b032bf035d21354585a4b2f95118b84e2fa4cc64cd5c478068a2c1" name="openal-soft-devel" arch="x86_64">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="f3a44b0f00b02be7b853efd8d05e9d21b876fa8a4ea181f13b046c77d9216da7" name="stellarium" arch="x86_64">
    <version epoch="0" ver="0.12.0" rel="2.4.1"/>

<changelog author="lars@linux-schulserver.de" date="1236600000">- update to 0.10.2:
  + Based on Qt 4.5.
  + Display constellations lines using nicely distorted arcs.
  + Fixed GUI problems when creating a new location.
  + Fixed the grid lines wrap around at the discontinuities in
    cylindrical and Mercator projection.
  + Hide the planet computation problems after year 80608.
  + Use the Qt raster engine by default. This fixes mac rendering
    bugs and speeds up greatly the GUI rendering.
  + Improved management of intersection of viewports with large FOV
    and projections with singularities.
  + Added Hammer-Aitoff projection allowing full sky overview.
  + Fixed various bugs.</changelog>
<changelog author="lars@linux-schulserver.de" date="1236772800">- updated documentation (pdf)
- added entry in susehelp center for documentation</changelog>
<changelog author="cyberorg@opensuse.org" date="1277726400">- Update to 0.10.5:
  sky
  * default catalogue of over 600,000 stars
  * extra catalogues with more than 210 million stars
  * asterisms and illustrations of the constellations
  * constellations for twelve different cultures
  * images of nebulae (full Messier catalogue)
  * realistic Milky Way
  * very realistic atmosphere, sunrise and sunset
  * the planets and their satellites
  interface
  * a powerful zoom
  * time control
  * multilingual interface
  * fisheye projection for planetarium domes
  * spheric mirror projection for your own low-cost dome
  * all new graphical interface and extensive keyboard control
  * telescope control
  visualisation
  * equatorial and azimuthal grids
  * star twinkling
  * shooting stars
  * eclipse simulation
  * skinnable landscapes, now with spheric panorama projection
  customisability
  * plugin system adding artifical satellites, ocular simulation, telescrope configuration and more
  * add your own deep sky objects, landscapes, constellation images, scripts...</changelog>
<changelog author="reddwarf@opensuse.org" date="1285502400">- Run spec-cleaner
- Remove support for pre-11.1 openSUSE versions
- Remove multiple unneeded BuildRequires
- Compile with latest gcc instead of 4.3
- Fixed Group and License tags
- Remove missuse of -fPIC with -no_fpic patch
- Remove unneeded SUSE_ASNEEDED=0 and %suse_update_config
- Run make with VERBOSE=1 to help rpmlint
- Use upstream's menu icon and install it under hicolor theme
- Enable sound support
- Fix Phonon use with -phonon patch</changelog>
<changelog author="reddwarf@opensuse.org" date="1291636800">- update to 0.10.6
  + New feature for installing landscapes from ZIP archives.
  + New plugin: Solar System editor.
  + New plugin: Time Zone manual override.
  + Oculars plugin: customizable keyboard shortcuts.
  + Satellites plugin: added new orbit prediction engine w/ orbits.
  + Satellites plugin: can now update TLEs from a local file.
  + Telescope control plugin: added manual equinox/epoch override.
- removed -no_fpic, -cmake and -phonon patches</changelog>
<changelog author="draht@suse.de" date="1315656000">- update to 0.11.0
  + New feature: atmosphere refraction support.
  + New plugin: Historical supernova.
  + New translatable strings: landscapes.
  + New moons of solar system planets
  + New feature: using different symbols for nebula icons.
  + TimeZone plug-in: fixed a bug preventing the saving of custom
    time zones.
  + Ocular plug-in: Corrected the calculation of CCD FOV.
  + Ocular plug-in: Implemented rotating the CCD bounding box.
  + Ocular plug-in: Made Telrad &amp; CCD mutually exclusive.
  + Ocular plug-in: Implemented better binoculars support
  + Ocular plug-in: Redesign dialog.
  + SVMT plug-in: Adding QtWebKit dependency.
  + Satellite plug-in: improve of code.
  + Solar System Editor plug-in: fixed MPES online search and updated hard-coded URLs
  + Skycultures: two new skyculture descriptions in Norwegian (Bokmål).
  + Redesign search tool
  + Improved texture manager.</changelog>
<changelog author="lars@linux-schulserver.de" date="1321185600">- update to 0.11.1:
  + new skyculture: Arabic
  + new moons and rings (LP: #815484, #834336)
  + new translations for landscapes and sky cultures (LP: #849292)
  + possibility to observate geo-orbiting satellites (LP: #837274)
  + new cities (LP: #856343, #860206)
  Fixes:
  + misspelling on a star name (LP: #884795)
  + location window: map pointer position is updated on
    longitude/latitude change.
  + location window: fixed checking "Use as default" changing the
    name of the selected location to "New Location" (LP: #881613)
  + Solar System Editor plug-in: a bug in the parsing of MPC lists:
    the epoch's Julian Day value was wrong by 0.5 JD (LP: #836839)
  + Solar System Editor plug-in: crash while trying to browse for
    a local file (LP: #837396)
  + Historical Supernovae plug-in: a bug in plug-in name (LP: #803157)
  + Historical Supernovae plug-in: a bug in selected instead
    of nearby stars (LP: #835815)
  + doesn't load localised description of skyculture/landscape if
    applanguage=system_default (LP: #845924)
  + add/remove landscapes dialog bug in OSX 10.6.8 (LP: #812008)
  + horizon line setting not saved (LP: #811945)
  + orbital period totally wrong for Himalia (LP: #806174)
  + flag_show_fps = false &amp; flag_show_fov = flase (LP: #728294)
  + 0.11.0 will crash if a landscape is selected with misspelled
    planet name (LP: #835422)
  + crash on selecting off-Earth location in the Location
    window (LP: #834886)
  + 0.11.0 crashes when switching language while location window
    is open (LP: #824936)
  + 0.11.0 crashes when trying using custom distortion file
    (LP: #871313)</changelog>
<changelog author="badshah400@gmail.com" date="1338897600">- Update to version 0.11.3:
  + Added:
  - ecliptic grid (LP: #834307)
  - world observatories to the locations list (LP: #891643)
  - allow configuration of url for SIMBAD lookups (LP: #948528)
  - opportunity to freely choose the object information to
    display (LP: #834325)
  - Pluto texture (LP: #906766)
  + Many bugs fixed; see installed file
    /usr/share/doc/packages/stellarium/ChangeLog for a complete
    list.
- Changes from version 0.11.2:
  + Too many to list; see installed file
    /usr/share/doc/packages/stellarium/ChangeLog for a complete
    list.
- Cleanup spec file:
  + Correct License tag in keeping with spdx.org norms
  + Also package ChangeLog file in docdir
- Add Type=Application in stellarium_user_guide.desktop to prevent
  rpmlint warnings
- Install icons of various sizes in the hicolor icon directory;
  depends on ImageMagick
- Use BuildRequires: hicolor-icon-theme so that there is no need
  to separately own the hicolor icon theme directories; also use
  post install scripts to update the hicolor icon theme index.</changelog>
<changelog author="badshah400@gmail.com" date="1339416000">- Remove unnecessary file that creates a licensing problem from
  source (bnc#766373).</changelog>
<changelog author="idonmez@suse.com" date="1347969600">- Add explicit glu dependency</changelog>
<changelog author="badshah400@gmail.com" date="1349784000">- Update to version 0.11.4:
  + New features:
  - New plugin: Exoplanets
  - New plugin: Observability analysis
  - Get geometric altitude and azimuth for script engine (LP:
    [#1010617])
  - Sky image loading with altitude/azimuth coordinates (LP:
    [#1023548])
  - New hotkey for star name labels (LP: #1032989)
  - Option to activate/deactivate the Nebula Background Images
    button via GUI (LP: #925247)
  - Return to user set location and landscape (LP: #981507)
  - Display degrees and minutes for FOV of CCD (LP: #998761)
  - Adding all possible satellites (LP: #1006495)
  - Building a Windows x64 packages (LP: #1003041, #1027607)
  - Apply atmosphere effect only on bodies with atmosphere (LP:
    [#971875])
  + Fixed:
  - Various Stellarium freezes and crashes (LP: #1005155,
    [#1030913], #940638, #992267, #1033380, #951967, #1040054)
  - Various plugins issues (LP: #751381, #892027, #1006134,
    [#1040066], #1040085)
  - Various issues for nebulae (LP: #1026021, #744517)
  - Add/subtract one sidereal year jumps wrong amount (LP:
    [#1006208])
  - Various small issues, typos and mistakes (LP: #1022506,
    [#1032469], #1019247, #985204)
  - Various issues in Scripting Engine (LP: #1023934, #1017148,
    [#1017154], #730180)
  + Changed:
  - New tab in the configuration window to control the selected
    object information
  - Improvement Night Vision mode
  - Extend list of default scripts.</changelog>
<changelog author="badshah400@gmail.com" date="1359633600">- Update to version 0.12.0 (bnc#801946):
  + New features:
  - New rendering engine (LP: #673183)
  - Editable keybindings (LP: #1098851, #1035635, #832256,
    [#789002])
  - Scripting for plugins (LP: #1040242)
  - Some transneptunian objects (LP: #899084, #1051205)
  - New geographical locations (LP: #1051803)
  - New textures for DSO
  - DeltaT and lunar acceleration computation (LP: #575621)
  + Improvements:
  - Improving the scripting engine (LP: #1059368)
  - Improving the plugins (LP: #1082167, #1042714)
  - Improving the coordinate grids (LP: #1036294)
  - Improving the constellation boundaries (LP: #1039072)
  - Improving the search tool
  + Bug fixes:
  - Clang Wself-assign warning during build process on some
    platforms (LP: #1097358)
  - Bugs in Observability plugin (LP: #1042059, #1054599,
    [#1053058])
  - Bugs in TUI plugin (LP: #1083380)
  - Bugs in Satellites plugin (LP: #1048220)
  - Bugs in Compass plugin (LP: #695891)
  - Bugs in scripting engine (LP: #1046518, #1092781)
  - Font corruption bugs (LP: #597633, #778747, #819278,
    [#903310])
  - Screen flashing in fullscreen mode (LP: #716695, #824788)
  - Lost nebula images (LP: #1042393, #1051038)
  - Bugs in Night Vision mode (LP: #578367)
  - Bugs in GUI and Core (LP: #1090722, #1082510, #1071455,
    [#1071458], #1056868, #1054600, #1045111, #1040944, #1077545)
  - Crashes (LP: #1043640, #1044654, #1045783)
- Drop outdated user guide from package, and corresponding
  .desktop file (the user guide is now on the wiki
  http://www.stellarium.org/wiki/index.php/Stellarium_User_Guide)
- Drop build dependency on ImageMagick, as the install script now
  automatically installs prepackaged icons in the hicolor
  directory
- Require qt &gt;= 4.8 and cmake &gt;= 2.8.7 for building.</changelog>

</package>
<package pkgid="27d374aa87763152e43ef438b6e7eb3c43d27ce157dfab86a2206dfbf81a7de1" name="libopenal0-32bit" arch="x86_64">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="c7ea608e144a8a5869f3a51f35f9359d86d171425914b368b149aec2a5b95751" name="libopenal1-32bit" arch="x86_64">
    <version epoch="0" ver="1.15" rel="4.6.1"/>

<changelog author="lnussel@suse.de" date="1241611200">- new version 1.7.411
  * New table-based panning algorithm, allowing the center channel to be included in the mix
  * Speaker arrangements are now configurable
  * Added a new PortAudio backend
  * Some changes to the ALSA device list
    Standard enumeration will now only list a single ALSA playback device (for "default"), and there should be no more name clashes preventing a device with the same name from being used
  * Low-pass filters now affect multi-channel sources
  * Corrections for 6.1 channel placements
  * Multi-channel sources are now re-mixed when using a different output mode
    This prevents source channels from being lost if there isn't a matching output channel (eg. 5.1 sources on stereo output)
  * Multi-channel source gains are now correctly clamped to the source's min/max gains
  * The air absorption calculation now uses the correct distance
  * The source room rolloff factor can now be set up to 10
  * Updated reverb code that better follows the reverb parameters
- add pulseaudio backend from git head and enable by default</changelog>
<changelog author="lnussel@suse.de" date="1244548800">- new version 1.8.466
  * Support for two more effects: AL_EFFECT_EAXREVERB and AL_EFFECT_ECHO
    Not all of the EAXREVERB properties will currently affect the output. More
    should be supported in the future
  * Improved reverb
  * Added a PulseAudio backend
  * Improved mixer efficiency a bit
  * Improved ALSA playback
  * Multiple auxiliary slots supported
    Default is four, which can be modified with the config file
  * Multiple auxiliary sends supported
    Default is two per source, which cannot be increased without recompilation.
    The amount can be decreased with the config file</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.9.563
  * Preliminary support for the new ALC_EXT_disconnect extension.
  * Support for 32-bit float playback and capture on some backends
  * Proper support for the ALC_FREQUENCY context attribute
  * Fixed compatibility with newer PulseAudio libs.
  * Fixed parsing of the speaker layout config string.
  * Fixed buffer size issues with ALSA capture.
  * Fixed a problem where the reported number of processed buffers could be wrong.
  * Fixed possible crashes when specifying invalid device pointers.
  * Removed the backend-specific period config options, and made it a global option instead.
  * Deprecated the refresh config option for the new period_size option.
  * Better cleanup of backends when the OpenAL lib is unloaded.</changelog>
<changelog author="lnussel@suse.de" date="1257076800">- update to current git snapshot to fix problems with pulseaudio
  (bnc#551022)
- disable --as-needed for libopenal.so.0 compatibility library to
  force linking against libopenal.so.1</changelog>
<changelog author="lnussel@suse.de" date="1257768000">- new version 1.10.622
  * Fixed OSS and PulseAudio backends
  * Support for disconnect notifications with PulseAudio when the
    server connection dies
  * Fixed surround sound channel ordering for PulseAudio playback
  * Fixed 7.1 output
  * Fixed potential crash when setting an AL_EFFECT_NULL effect on
    an auxiliary effect slot
  * Backend libraries are now loaded and released as needed
    In particular, this allows for backends to be added and
    removed at runtime when their corresponding libraries are
    installed and uninstalled (provided support for those backends
    was compiled in). An active backend will remain available as
    long as its in use.
  * Support for multiple contexts per device
  * Fixed possible ghost references on buffers and auxiliary
    slots, if they're attached to sources that are forcibly
    deleted on context destruction
- only actually pulseaudio if at least version 0.9.15</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="lnussel@suse.de" date="1262606400">- update to current git snapshot</changelog>
<changelog author="lnussel@suse.de" date="1263816000">- new version 1.11.753
  * Fixed compatibility with newer PulseAudio libs
  * The PulseAudio backend will now be tried first, when available
  * Fixed a crash with the echo effect
  * Configurable resampler, supporting point, linear (default), and
    cosine methods
  * Improved reverb, which now supports the Modulation and Echo
    properties
  * The alsoft/.conf/.ini/rc drivers config option now allows unnamed
    backends to remain available, by ending the device list with a
    comma (,)
  * PulseAudio playback will try to use an output frequency and
    channel format that best matches the default sink If the sink
    device is configured for 5.1 output at 48khz, for example, OpenAL
    Soft will automatically use 5.1 output at 48khz, unless overridden
    in the config file.
  * Multi-channel sounds are now passed through the auxiliary sends
    Although they are down-mixed to mono, losing channel separation.
  * Fixed playback when creating a second context from a device
  * Added a new config option to enable real-time priority when mixing
    for certain backends (ALSA, OSS, Solaris, and DirectSound)
  * Buffers now store 32-bit float sample data internally, to retain
    32-bit sample accuracy
  * Added a new head-dampening config option, for mono and stereo
    playback This slightly filters sounds coming from behind, allowing
    for some subtle differences between front and back sound sources.
  * Added an option to allow spawning the PulseAudio server on demand
  * Support for the new AL_EXT_source_distance_model extension</changelog>
<changelog author="lnussel@suse.de" date="1269950400">- new version 1.12.854
  * Fixed playback when the PulseAudio buffer is calculated to be more than 64KB.
  * Restored compatibility with some older PulseAudio libs.
  * Alternative buffer sizing for PulseAudio, specified using a new config option.
  * Improved buffer size calculations, to prevent drastic latency changes when certain properties (such as ALC_FREQUENCY) are modified.
  * Added capture support for the PortAudio backend.
  * Support for PortAudio under Windows.
  * Added support for the format extensions AL_EXT_MULAW, AL_EXT_MULAW_MCFORMATS, and AL_EXT_DOUBLE.
  * Support for the new ALC_EXT_thread_local_context extension.
  * Improved library load time by delaying backend device probing until needed.
  * Updated alext.h to provide EFX tokens and function types.
  * Unsupported effects and filters are no longer returned by alGetEnumValue.
  * The Wave File Writer device now creates WAVEFORMATEXTENSIBLE files, to better handle multi-channel and float output.</changelog>
<changelog author="lnussel@suse.de" date="1298289600">- new version 1.13
  * Added support for the ring modulator EFX effect.
  * Duplication of stereo sources (onto side- and rear-channels) in now enabled by default.
    This can still be disabled via alsoft.conf.
  * Support for the new AL_SOFT_loop_points and AL_SOFT_buffer_sub_data extensions.
  * Added the ability to redirect log output to a file, by setting the ALSOFT_LOGFILE environment variable.
  * Improved invalid parameter checks.
  * Better checks against integer overflows when allocating buffer storage.
  * Internal mixer support for 8-, 16-, and 32-bit input formats, improving memory consumption by not converting them all to 32-bit.
  * Improved device-change handling with the PulseAudio backend.
  * All available PulseAudio devices are now enumerated with ALC_ENUMERATE_ALL_EXT.
  * PulseAudio devices again use the periods and period_size config options.
  * Improved stability when PortAudio is enabled.
    The library tends to cause a crash when it's unloaded and reloaded.
  * Added a WaveOut backend for Windows.
  * Added a cubic resampler to replace the cosine resampler.
  * Increased the maximum number of source auxiliary sends to 4, and changed the default to 1.
  * Massive internal changes to the mixer and buffer loading code, designed for future improvements for allowable input and output formats.</changelog>
<changelog author="lnussel@suse.de" date="1340712000">- new version 1.14
  * Improved multi-threaded efficiency, relying less on a "big" mutex in favor of rw-locks and atomic operations where possible.
  * Added support for HRTF-based mixing. Stereo output only. The default built-in data set only supports 44100hz playback. See the new hrtf.txt for more information.
  * Added CMake options to cause a configuration error if the wanted backends aren't available.
  * Modified backends so that only one is used at a time (for each playback and capture), to avoid device ownership conflicts.
  * Fixed enumeration in certain backends to not list a default device, when the default device is enumerated normally anyway (eg, with DirectSound and PulseAudio).
  * Improved device naming to more closely match the names given by the backends.
  * Fixed handling of NaN values for float and double buffer samples.
  * Added a new efx-presets.h header to define useful reverb presets for EFX.
  * Added support for the ALC_EXT_DEDICATED extension.
  * Fixed alc.h to include ALC_ENUMERATE_ALL_EXT enums, like other systems.
  * Added support for the new AL_SOFT_buffer_samples, AL_SOFT_direct_channels, and ALC_SOFT_loopback extensions.
  * Provided an env-var.txt to describe the available options set through environment variables.
  * Fixed the source cone angle properties to work with the full 0-to-360 range as intended.
  * An env var option is provided to restore the old buggy behavior for apps that need it.
  * Added an example program that streams sound using ffmpeg.
  * Added a utility to make HRTF data files from the KEMAR diffuse and compact data sets.
- removed rpmlintrc in favor of a lecacy exception in rpmlint itself</changelog>
<changelog author="dvaleev@suse.com" date="1342872000">- the used fpu control bits are x86 specific</changelog>
<changelog author="reddwarf@opensuse.org" date="1352116800">- Remove support for old distributions
- Remove Icon tag and icon file. It's not normal for openSUSE packages to use it
- Remove Conflicts/Provides for rename from openal. Latest release of the old openal was in openSUSE 11.1.
- Use pkgconfig() BuildRequires
- Run spec-cleaner
- Rename libopenal1-soft to libopenal1
- Disable OSS support</changelog>
<changelog author="lnussel@suse.de" date="1352721600">- update to git snapshot close to 1.15
- re-enable OSS support
- also rename libopenal0-soft for consistency</changelog>
<changelog author="cfarrell@suse.com" date="1354017600">- license update: LGPL-2.1+ and GPL-2.0+
  See the c files in utils/ - looks like a GPL licensed utility is included
  (as aggregate)</changelog>
<changelog author="lnussel@suse.de" date="1354881600">- update to new version 1.15
  - Fixed device enumeration with the OSS backend.
  - Reorganized internal mixing logic, so unneeded steps can potentially be skipped for better performance.
  - Removed the lookup table for calculating the mixing pans. The panning is now calculated directly for better precision.
  - Improved the panning of stereo source channels when using stereo output.
  - Improved source filter quality on send paths.
  - Added a config option to allow PulseAudio to move streams between devices.
  - Currently disabled by default, as the device specifier does not properly update.
  - The PulseAudio backend will now attempt to spawn a server by default.
  - Added a workaround for a DirectSound bug relating to float32 output.
  - Added SSE-based mixers, for HRTF and non-HRTF mixing.
  - SSE can be detected at run-time, and be disabled as needed.
  - Added support for the new AL_SOFT_source_latency extension.
  - Currently, the PulseAudio, ALSA, and MMDevAPI backends provide proper latency information.
  - Improved ALSA capture by avoiding an extra buffer when using sizes supported by the underlying device.
  - Improved the makehrtf utility to support new options and input formats.
  - Modified the CFLAGS declared in the pkg-config file so the "AL/" portion of the header includes can optionally be omitted.
  - Added a couple example code programs to show how to apply reverb, and retrieve latency.
  - The configuration sample is now installed into the share/openal/ directory instead of /etc/openal.
  - Note, /etc/openal/alsoft.conf is still used to read the configuration like before.
  - The configuration sample now gets installed by default.
- undo upstream change to auto spawn pulseaudio (openal-no-autospawn.diff)</changelog>
<changelog author="joop.boonen@opensuse.org" date="1357560000">- Fixed SLES build
- Removed Requirements that are resolved automatically
- Added missing openal-soft-devel Requirement libopenal1</changelog>
<changelog author="reddwarf@opensuse.org" date="1357646400">- The devel package requires libopenal1, not openal-soft</changelog>
<changelog author="lnussel@suse.de" date="1358164800">- install legacy provides for openal again. Some packages still rely
  on it.</changelog>
<changelog author="wstephenson@suse.com" date="1362830400">- Add obsoletes/provides to baselibs packages so 32bit packages
  replace their openal-soft predecessors (bnc#810009)</changelog>

</package>
<package pkgid="3cc13dc7e80cac3e0d854658d8bb9c16eaa680d68c06928120af2f1e80dd7aa4" name="apcupsd" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="3.4.5"/>

<changelog author="seife@opensuse.org" date="1266235200">- fix build with newer net-snmp by undefining MIB</changelog>
<changelog author="seife@opensuse.org" date="1266235200">- add missing hal directories to pass rpmlint checks</changelog>
<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905600">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905600">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>

</package>
<package pkgid="1c6284f636904c0ae621d36fb49a8d1e1c3a349baa0518bc883bde9837549380" name="apcupsd-cgi" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="3.4.5"/>

<changelog author="seife@opensuse.org" date="1266235200">- fix build with newer net-snmp by undefining MIB</changelog>
<changelog author="seife@opensuse.org" date="1266235200">- add missing hal directories to pass rpmlint checks</changelog>
<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905600">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905600">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>

</package>
<package pkgid="4c87c7560c3441c84e3eedea6cac066107c5e298048d1d8bde8771810d2dff98" name="apcupsd-gui" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="3.4.5"/>

<changelog author="seife@opensuse.org" date="1266235200">- fix build with newer net-snmp by undefining MIB</changelog>
<changelog author="seife@opensuse.org" date="1266235200">- add missing hal directories to pass rpmlint checks</changelog>
<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905600">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905600">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>

</package>
<package pkgid="f4a5db6d0ff4d4f3cc69c7cc15299aeaa9fdaf28166bcd250480bae6b7684f2d" name="java-1_7_0-openjdk" arch="x86_64">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="92e279a512e7fee7255f9d31e5b79e05e73e6f545a21d22a83fcaad02f5e0b7b" name="java-1_7_0-openjdk-demo" arch="x86_64">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="001587fb78061ace36d2b05de9b9a84fa820a44b4acc78abdedee41963815032" name="java-1_7_0-openjdk-devel" arch="x86_64">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="085207c976f0b9f6faa8dd130be7ab23e7e96f3eb181c7aad2ed764eb1f75461" name="java-1_7_0-openjdk-javadoc" arch="x86_64">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="d95cc012140b4b41a9b1551c65e785b7ee59d5399678a90b6543f18d2a843114" name="java-1_7_0-openjdk-src" arch="x86_64">
    <version epoch="0" ver="1.7.0.6" rel="8.8.1"/>

<changelog author="mvyskocil@suse.cz" date="1341230400">- fix bnc#769543: triplicate menu entries
  * store jconsole and policytool in jvmdir and maintain symlink via
    update-alternatives only
- use Settings;DesktopSettings;Security; for policytool
- remove uneeded code generates fielists in install section</changelog>
<changelog author="mvyskocil@suse.cz" date="1342094400">- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64</changelog>
<changelog author="mvyskocil@suse.cz" date="1346328000">- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks
    removed in  6788531.
  * Bug fixes
  - PR902: PulseAudioClip getMicrosecondsLength() returns length in
    milliseconds, not microseconds
  - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap
    size
  - PR1050: Stream objects not garbage collected
  - PR1119: Only add classes to rt-source-files.txt if the class (or one or
    more of its methods/fields) are actually missing from the boot JDK
  - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
  * OpenJDK
  - Make dynamic support for GConf work again.
  - PR1095: Add configure option for -Werror
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - PR1140: Unnecessary diz files should not be installed
  - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
  * JamVM
  - ARMv6 armhf: Changes for Raspbian (Raspberry Pi)
  - PPC: Don't use lwsync if it isn't supported
  - X86: Generate machine-dependent stubs for i386
  - When suspending, ignore detached threads that have died, this prevents
    a user caused deadlock when an external thread has been attached to the
    VM via JNI and it has exited without detaching
  - Add missing REF_TO_OBJs for references passed from JNI, this enable
    JamVM to run Qt-Jambi
- there are number of fixes in 2.3, see NEWS</changelog>
<changelog author="mvyskocil@suse.cz" date="1346673600">- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
  * Security fixes
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks
    removed in  6788531.
  * OpenJDK
  - Fix Zero FTBFS issues with 2.3
  - S7180036: Build failure in Mac platform caused by fix # 7163201
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  * Bug fixes
  - PR1149: Zero-specific patch files not being packaged
- use icedtea tarball for build again, this led into following dropped files
  because the are already in the tarball and simplified %prep and %build
  - drop class-rewriter.tar.gz
  - drop systemtap-tapset.tar.gz
  - drop desktop-files.tar.gz
  - drop nss.cfg
  - drop pulseaudio.tar.gz
  - drop remove-intree-libraries.sh
  - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws,
    jdk, langtools and hotspot
  - drop rhino.patch, pulse-soundproperties and systemtap patch
- move gnome bridge patches before make as it's irritating to have the
  patch fail after openjdk is built
- use explicit file attributes in %files sections to prevent the file
  permissions problems in a future (like bnc#770040)
- changed version scheme, so it now matches Oracle Java
  1.7.0.6 == Java7 u 6</changelog>
<changelog author="mvyskocil@suse.cz" date="1346760000">- zero build can be enabled using rpmbuild (osc build) --with zero
- add hotspot 2.1 needed for zero
- fix filelist on %{ix86}</changelog>
<changelog author="dmueller@suse.com" date="1346760000">- add Sources as full links, so that they can be verified
- replace no-return-on-nonvoid patch with a more robust version
  that annotates the nonreturning functions to avoid spurious
  warnings that fail the build
- fix build on ARM and i586
- remove files that are no longer used</changelog>
<changelog author="dmueller@suse.com" date="1346932800">- update directory ownership for i586</changelog>
<changelog author="dmueller@suse.com" date="1347364800">- fix two further "uninitialized return" warnings for zero builds</changelog>
<changelog author="mvyskocil@suse.com" date="1347969600">- add the optional jamvm support
  * running build --with jamvm enables it
- add an initial support for build of older releases
  * make some buildrequires dependant on suse_version
  * workaround older zlib w/o pkgconfig
  * fix cacerts installation on pre-11.3</changelog>
<changelog author="mvyskocil@suse.com" date="1349697600">- %posttrans java-cacerts and cacerts are now recreated if missing, are not
  properly linked and does not contain/point to file with correct mime-type
  application/x-java-keystore
  * fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
  * fixes bnc#727223 - Exceptions during certificate import</changelog>
<changelog author="mvyskocil@suse.com" date="1350648000">- update to icedtea-2.3.3 (bnc#785814)
  * Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158800: Improve storage of symbol tables
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
  * Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.
  * JamVM
  - PR1155: Do not put version number in libjvm.so SONAME
- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish
  classes were added
- add icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1355745600">- fix a segfault in AWT code - (bnc#792951)
  * add openjdk-7-src-b147-awt-crasher.patch
- turn pulseaudio off on pre 11.4 distros</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- update to java access bridge 1.26.2
  * bugfix release, mainly 64bit JNI and JVM support</changelog>
<changelog author="adrian@suse.de" date="1355832000">- use jamvm on %arm
- use icedtea package name instead of protected openjdk for jamvm builds
- fix armv5 build</changelog>
<changelog author="mvyskocil@suse.com" date="1358337600">- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
  * Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
  * Bug fixes
  - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle &gt; 32 bit shifts
  - G422525: Fix building with PaX enabled kernels.
- use gpg-offline to check the validity of icedtea tarball</changelog>
<changelog author="adrian@suse.de" date="1358769600">- few missing /openjdk/%{origin}/ changes</changelog>
<changelog author="mvyskocil@suse.com" date="1360756800">- update to icedtea-2.3.6 (bnc#803379)
  * Security fixes
  - S6563318, CVE-2013-0424: RMI data sanitization
  - S6664509, CVE-2013-0425: Add logging context
  - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time
  - S6776941: CVE-2013-0427: Improve thread pool shutdown
  - S7141694, CVE-2013-0429: Improving CORBA internals
  - S7173145: Improve in-memory representation of splashscreens
  - S7186945: Unpack200 improvement
  - S7186946: Refine unpacker resource usage
  - S7186948: Improve Swing data validation
  - S7186952, CVE-2013-0432: Improve clipboard access
  - S7186954: Improve connection performance
  - S7186957: Improve Pack200 data validation
  - S7192392, CVE-2013-0443: Better validation of client keys
  - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages
  - S7192977, CVE-2013-0442: Issue in toolkit thread
  - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies
  - S7200491: Tighten up JTable layout code
  - S7200493, CVE-2013-0444: Improve cache handling
  - S7200499: Better data validation for options
  - S7200500: Launcher better input validation
  - S7201064: Better dialogue checking
  - S7201066, CVE-2013-0441: Change modifiers on unused fields
  - S7201068, CVE-2013-0435: Better handling of UI elements
  - S7201070: Serialization to conform to protocol
  - S7201071, CVE-2013-0433: InetSocketAddress serialization issue
  - S8000210: Improve JarFile code quality
  - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class
  - S8000539, CVE-2013-0431: Introspect JMX data handling
  - S8000540, CVE-2013-1475: Improve IIOP type reuse management
  - S8000631, CVE-2013-1476: Restrict access to class constructor
  - S8001235, CVE-2013-0434: Improve JAXP HTTP handling
  - S8001242: Improve RMI HTTP conformance
  - S8001307: Modify ACC_SUPER behavior
  - S8001972, CVE-2013-1478: Improve image processing
  - S8002325, CVE-2013-1480: Improve management of images
  * Backports
  - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently
  - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist
  - S7107613: scalability blocker in javax.crypto.CryptoPermissions
  - S7107616: scalability blocker in javax.crypto.JceSecurityManager
  - S7146424: Wildcard expansion for single entry classpath
  - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941)
  - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S7162488: VM not printing unknown -XX options
  - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility
  - S7175616: Port fix for TimeZone from JDK 8 to JDK 7
  - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX
  - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number
  - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo
  - S7185245: Licensee source bundle tries to compile JFR
  - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key
  - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression)
  - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection
  - S7188114: (launcher) need an alternate command line parser for Windows
  - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number
  - S7189350: Fix failed for CR 7162144
  - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245
  - S7193219: JComboBox serialization fails in JDK 1.7
  - S7193977: REGRESSION:Java 7's JavaBeans persistence ignoring the "transient" flag on properties
  - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released
  - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node
  - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+
  - S7197071: Makefiles for various security providers aren't including the default manifest.
  - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default
  - S7198146: Another new regression test does not compile on windows-amd64
  - S7198570: (tz) Support tzdata2012f
  - S7198640: new hotspot build - hs23.6-b04
  - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match.
  - S7199645: Increment build # of hs23.5 to b02
  - S7199669: Update tags in .hgtags file for CPU release rename
  - S7200720: crash in net.dll during NTLM authentication
  - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1)
  - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method)
  - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater
  - S8000286: [macosx] Views keep scrolling back to the drag position after DnD
  - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails
  - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab
  - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number
  - S8001124: jdk7u ProblemList.txt updates (10/2012)
  - S8001242: Improve RMI HTTP conformance
  - S8001808: Create a test for 8000327
  - S8001876: Create regtest for 8000283
  - S8002068: Build broken: corba code changes unable to use new JDK 7 classes
  - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows
  - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar
  - S8002225: (tz) Support tzdata2012i
  - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues
  - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup
  - S8003948: NTLM/Negotiate authentication problem
  - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows}
  - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01
  - S8004341: Two JCK tests fails with 7u11 b06
  - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
  * Bug fixes
  - Fix build using Zero's HotSpot so all patches apply again.
  - PR1295: jamvm parallel unpack failure
  * removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch
  - removed icedtea-2.3.3-refresh-6924259-string_offset.patch</changelog>
<changelog author="mvyskocil@suse.com" date="1361448000">- update to icedtea-2.3.7 (bnc#803379)
  - S8004937, CVE-2013-1484: Improve proxy construction
  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
  - S8006446, CVE-2013-1486: Restrict MBeanServer access
  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
  - S8007688: Blacklist known bad certificate
  * Backports
  - S8007393: Possible race condition after JDK-6664509
  - S8007611: logging behavior in applet changed
  * Bug fixes
  - PR1303: Support building with giflib 5</changelog>
<changelog author="schwab@linux-m68k.org" date="1362139200">- Define bits to %__isa_bits if defined</changelog>
<changelog author="mvyskocil@suse.com" date="1363262400">- update to icedtea-2.3.7 (bnc#809386)
  * Security fixes
  - S8007014, CVE-2013-0809: Improve image handling
  - S8007675, CVE-2013-1493: Improve color conversion
  * Backports
  - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS
  - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c
  - S8006179: JSR292 MethodHandles lookup with interface using findVirtual()
  - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
  * Bug fixes
  - PR1303: Correct #ifdef to #if
  - PR1340: Simplify the rhino class rewriter to avoid use of concurrency
  - Revert 7017193 and add the missing free call, until a better fix is ready.
  * made awt crasher patch deprecated</changelog>

</package>
<package pkgid="8915deb2ea7fc32f87fbca9f65e6a4a7939b74c66543045c12253ceb55c44056" name="finch" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="7a94f4083228bc6eabe32e88104d850a3dd9d822454fd60aea82b7d45721e41f" name="finch-devel" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="fa46074023d063477b1f2f3b74c9b9adc6a8a3a2cb6957c8fb9b20716890e3d0" name="libpurple" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="401dba87a54b88786cfae7422b2380623f867fef44adf17974d392e9e83dc26d" name="libpurple-devel" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="a5421f197ba59a9d9d40416e1a333a179b13f95d8c49b0fd6521b5bff64f9bcb" name="libpurple-meanwhile" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="6d6e8ad5dc425a2bb8b866720452b37aed1838ac1d2b9dd27d096bd7639cb473" name="libpurple-tcl" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="282e44a039da80547f6efc47ad5cbb0d5529566011e30ae8235c0e3c9e618b5a" name="pidgin" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="475bad6d441da0e5a171887f22f02ff992c162b674886585c172914afd95021e" name="pidgin-devel" arch="x86_64">
    <version epoch="0" ver="2.10.7" rel="4.4.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 2.8.0:
  + General:
  - Implement simple silence suppression for voice calls,
    preventing wasted bandwidth for silent periods during a call.
  - Added the DigiCert High Assurance CA-3 intermediate CA,
    needed for validation of the Facebook XMPP interface's
    certificate.
  - Removed the QQ protocol plugin. It hasn't worked in a long
    time and isn't being maintained.
  + Pidgin:
  - Duplicate code cleanup.
  - Voice/Video call window adapts correctly to adding or
    removing streams on the fly.
  - Don't cancel an ongoing call when rejecting the addition of a
    stream to the existing call.
  - Pidgin plugins can now override tab completion and detect
    clicks on usernames in the chat userlist.
  - Fix the tooltip being destroyed when it is full of
    information and cover the mouse
  + libpurple:
  - media:
    . Allow obtaining active local and remote candidates.
    . Allow getting/setting video capabilities.
    . Allow adding/removing streams on the fly.
    . Allow libpurple and plugins to set SDES properties for RTP
    conferences.
    . Add support for using TCP relaying with TURN
  - Simple Silence Suppression is optional per-account.
  - Fix purple-url-handler being unable to find an account.
  - Support new connection states in NetworkManager 0.9.
  - When removing a buddy, delete the pounces associated with it.
  - proxy: Add new "Tor/Privacy" proxy type that can be used to
    restrict operations that could leak potentially sensitive
    data (e.g. DNS queries).
  + AIM:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  + Gadu-Gadu:
  - Allow showing your status only to buddies.
  - Suppress blank messages that happen when receiving inline
    images.
  - Fix sending inline images to remote users, don't crash when
    trying to send large (&gt; 256kB) images.
  - Support typing notifications.
  - Optional SSL connection support for GNUTLS users
  - Don't count received messages or statuses when determining
    whether to send a keepalive packet.
  - Support XML events, resulting in immediate update of other
    users' buddy icons.
  - Accept poorly formatted URLs from other third-party clients
    in the same manner as the official client.
  + ICQ:
  - Fix setting icons with dimensions greater than 64x64 pixels
    by scaling them down to at most 64x64.
  - Fix unsetting your mood when "None" is selected.
  - Ignore Daylight Saving Time when performing calculations
    related to birthdays.
  - It is now possible to specify multiple encodings on the
    Advanced tab of an ICQ account's settings by using a
    comma-delimited list.
  + IRC:
  - Add "authserv" service command.
  + MSN:
  - Fix a hard-to-exploit crash in the MSN protocol when using
    the HTTP connection method.
  + MXit:
  - Support for an Invite Message when adding a buddy.
  - Fixed bug in splitting-up of messages that contain a lot of
    links.
  - Fixed crash caused by timer not being disabled on disconnect.
  - Clearing of the conversation window now works.
  - When receiving an invite you can display the sender's profile
    information, avatar image, invite message.
  - The Change PIN option was moved into separate action.
  - New profile attributes added and shown.
  - Added the ability to view and invite your Suggested Friends,
    and to search for contacts.
  - Also display the Status Message of offline contacts in their
    profile information.
  + XMPP:
  - Remember the previously entered user directory when searching
  - Correctly handle a buddy's unsetting his/her vCard-based
    avatar.
  - Squash one more situation that resulted in duplicate entries
    in the roster
  + Plugins:
  - The Voice/Video Settings plugin now includes the ability to
    test microphone settings.
  - Fix a crash when handling some saved settings in the
    Voice/Video Settings plugin.
- Drop pidgin-nm09.patch: fixed upstream.
- Disable building of evolution plugin for Factory, with a
  build_evo define. The plugin is currently not compatible with
  evolution 3.1.x.
- Add explicit gconf2-devel BuildRequires: it was implicitly
  brought before, but it is really needed.</changelog>
<changelog author="vuntz@opensuse.org" date="1308312000">- Add pidgin-nm09-more.patch: correctly handle state changes in
  NetworkManager 0.9.
- Add pidgin-gevolution-fix-build.patch: this fixes the build of
  the evolution integration. So drop all the %build_evo machinery.
- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
<changelog author="christoph.miebach@web.de" date="1308916800">- Update to version 2.9.0:
  + Pidgin:
  - Fix a potential remote denial-of-service bug related to
    displaying buddy icons.
  - Significantly improved performance of larger IRC channels
    (regression introduced in 2.8.0).
  - Fix Conversation-&gt;Add on AIM and MSN.
  - Entries in the chat user list are sorted properly again. This
    was inadvertenly broken in 2.8.0.
  + Finch:
  - Fix logging in to ICQ.
  + libpurple:
  - media: Actually use the specified TCP port from the TURN
    configuration to create a TCP relay candidate.
  + AIM and ICQ:
  - Fix crashes on some non-mainstream OSes when attempting to
    printf("%s", NULL).
  + Plugins:
  - The Evolution Integration plugin compiles again.
- Drop pidgin-gevolution-fix-build.patch: the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1309867200">- Add patch to fix "multiple display of room members in MUC"
  http://developer.pidgin.im/ticket/14351, bnc#703584.
- Export V=1 before make to enable verbose build of all code, not
  only some of the subdirs.</changelog>
<changelog author="vuntz@opensuse.org" date="1309953600">- Update summary and description of the main package and libpurple.
- Remove libpurple-lang Recommands from main package, as we know it
  already depend on libpurple, which will bring libpurple-lang.
- Create a libpurple-branding-upstream package (on 12.1 and later
  only):
  + this contains %{_sysconfdir}/purple/prefs.xml, which is the
    pidgin-prefs.xml we ship as source. This only includes
    documentation on how to change the default configuration.
  + this will let people know how to change the default
    configuration of libpurple, and potentially other clients.
  + since there is potentially also pidgin-related content in the
    same file, we also make libpurple-branding-upsream act as
    pidgin-branding-upstream (with Provides, Conflicts, Supplements
    that are usual for a branding package).
- Make libpurple own %{_sysconfdir}/purple/, which is where the
  default configuration lives.</changelog>
<changelog author="christoph.miebach@web.de" date="1314014400">- Update to version 2.10.0:
  + Pidgin:
  - Make the max size of incoming smileys a pref instead of
    hardcoding it.
  - Added a plugin information dialog to show information for
    plugins that aren't otherwise visible in the plugins dialog.
  - Fix building with GTK+ earlier than 2.14.0 (GTK+ 2.10 is
    still the minimum supported)
  + libpurple:
  - Fix a potential crash in the Log Reader plugin when reading
    QIP logs.
  - Fix a large number of strcpy() and strcat() invocations to
    use strlcpy() and strlcat(), etc., forestalling an entire
    class of string buffer overrun bugs.
  - Change some filename manipulations in filectl.c to use
    MAXPATHLEN instead of arbitrary length constants.
  - Fix endianness-related crash in NTLM authentication
  + Gadu-Gadu:
  - Fixed searching for buddies in public directory.
  - Better status message handling.
  - Merged two buddy blocking methods.
  - Fix building of the bundled libgadu library with older
    versions of GnuTLS. (patch plucked from upstream)
  + ICQ:
  - Fix crash selecting Tools-&gt;Set Mood when you're online with
    an ICQ account that is configured as an AIM account.
  + IRC:
  - Fix a crash when remote users have certain characters in
    their nicknames.
  - Fix the handling of formatting following mIRC ^O
  - Fix crash when NAMES is empty.
  + MSN:
  - Fix incorrect handling of HTTP 100 responses when using the
    HTTP connection method. This can lead to a crash.
  - Fix seemingly random crashing.
  - Fix a crash when the account is disconnected at the time we
    are doing a SB request.
  + XMPP:
  - Do not generate malformed XML ("&lt;/&gt;") when setting an empty
    mood.
  - Fix the /join &lt;room&gt; behavior.  (Broken when adding support
    for &lt;room&gt;@&lt;server&gt;)
  + Yahoo!/Yahoo! JAPAN:
  - Fix coming out of idle while in an unavailable state
  - Fix logging into Yahoo! JAPAN.
  + Windows-Specific Changes:
  - Open an explorer.exe window at the location of the file when
    clicking on a file link instead of executing the file,
    because executing a file can be potentially dangerous.
- Drop pidgin-b1dfad7fa45e394c213a97053d7ed5926c69901d.patch
  (multiple display of room members): the patch was taken from
  upstream and as such is included in the current tarball.</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dimstar@opensuse.org" date="1322481600">- Add pidgin-glib-2.31.patch: Fix build with glib 2.31.</changelog>
<changelog author="gankov@opensuse.org" date="1323518400">- Update to version 2.10.1:
  + AIM and ICQ:
  - Fix remotely-triggerable crashes by validating strings in a
    few messages related to buddy list management.
  + Bonjour:
  - IPv6 fixes
  + Gadu-Gadu:
  - Fix problems linking against GnuTLS.
  + IRC:
  - Fix a memory leak when admitting UTF-8 text with a non-UTF-8
    primary encoding.
  + Jabber:
  - Fix crashes and memory leaks when receiving malformed voice
    and video requests.
  + Sametime:
  - Separate "username" and "server" when adding new Sametime
    accounts.
  - Fix compilation in Visual C++.
  + SILC:
  - Fix CVE-2011-3594, by UTF-8 validating incoming messages
    before passing them to glib or libpurple.
  + Yahoo!:
  - Fetch buddy icons in some cases where we previously weren't.</changelog>
<changelog author="vuntz@opensuse.org" date="1329825600">- On 12.2, add explicit libSM-devel, libXScrnSaver-devel,
  libXext-devel, pkgconfig(x11) BuildRequires, to avoid issues
  after the big xorg-x11 packaging change.
- Get ready for transition from farsight2 to farstream in 12.2:
  + Only use farsight2-devel on &lt;= 12.1 (and &gt; 11.1).
  + Pass --disable-vv to configure on &gt; 12.1 (and &lt; 11.2), to
    disable voice/video support.
  + Add pidgin-port-to-farstream.patch, that we only apply on 12.2
    and later: port pidgin to farstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 2.10.2:
  + General:
  - Fix compilation when using binutils 2.22 and new GDK pixbuf.
  - Fix compilation of the MXit protocol plugin with GLib 2.31.
  + Pidgin:
  - Add support for the GNOME3 Network dialog.
  - Fix rare crash.
  - Add support for the GNOME3 Default Application dialog for
    configuring the Browser.
  + libpurple:
  - Support new connection states and signals for NetworkManager
    0.9+.
  + AIM and ICQ:
  - Fix a possible crash when receiving an unexpected message
    from the server.
  - Allow signing on with usernames containing periods and
    underscores.
  - Allow adding buddies containing periods and underscores.
  - Don't try to format ICQ usernames entered as email addresses.
    This gets rid of an "Unable to format username" error at
    login.
  + MSN:
  - Fix possible crashes caused by not validating incoming
    messages as UTF-8.
  - Support new protocol version MSNP18.
  - Fix messages to offline contacts.
  + Plugins:
  - The autoaccept plugin will no longer reset the preference for
    unknown buddies to "Auto Reject" in certain cases.
  + Windows-Specific Changes.
- Drop pidgin-nm09-more.patch: fixed upstream.
- Drop pidgin-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332504000">- Finish transition from farsight2 to farstream in 12.2:
  + Update pidgin-port-to-farstream.patch to latest version of the
    patch.
  + Add farstream-devel BuildRequires on openSUSE &gt; 12.1, now that
    farstream is in Factory.
  + Stop passing --disable-vv to configure on &gt; 12.1.
- Pass --disable-schemas-install to configure: this should be used
  when packaging applications with gconf schemas.</changelog>
<changelog author="christoph.miebach@web.de" date="1332763200">- Update to version 2.10.3:
  + MSN:
  - Fix buddies not going offline.</changelog>
<changelog author="christoph.miebach@web.de" date="1336392000">- Update to version 2.10.4:
  + General:
  - Support building against Farstream in addition to Farsight.
  + IRC:
  - Disable periodic WHO timer. IRC channel user lists will no
    longer automatically display away status, but libpurple will
    be much kinder to the network.
  - Print unknown numerics to channel windows if we can associate
    them.
  + MSN:
  - Fix a possible crash when receiving messages with certain
    characters or character encodings.
  + XMPP:
  - Fix a possible crash when receiving a series of specially
    crafted file transfer requests. (CVE-2012-2214)
  + Windows-Specific Changes:
  - Words added to spell check dictionaries are saved across
    restarts of Pidgin.
- Drop pidgin-port-to-farstream.patch: fixed upstream</changelog>
<changelog author="christoph.miebach@web.de" date="1341576000">- Update to version 2.10.5:
  + libpurple:
  - Add support for GNOME3 proxy settings.
  + Pidgin:
  - Fix a crash that may occur when trying to ignore a user who
    is not in the current chat room.
  + MSN:
  - Fix building with MSVC on Windows (broken in 2.10.4).
  + MXit:
  - Fix a buffer overflow vulnerability when parsing incoming
    messages containing inline images. (CVE-2012-3374)
- Rebase pidgin-gnome-keyring.patch.</changelog>
<changelog author="christoph.miebach@web.de" date="1341748800">- Update to version 2.10.6:
  + Pidgin:
  - Fix a bug that requires a triple-click to open a conversation
    window from the buddy list.</changelog>
<changelog author="dimstar@opensuse.org" date="1349784000">- Introduce with_evolution defines, which enables/disables the
  evolution plugin conditionally (only available on openSUSE&lt;=12.2)
  as pidgin does not yet support GNOME 3.6 (pidgin.im#15353)
  + if with_evolution is not defined (false/0):
  - evolution-data-server BuildRequires is being skipped
  - Do not pass --with-gevolution to configure.
  - Do not build the -evolution sub package
  - Obsolete pidgin-evolution from the main package.
- Pass --disable-vv to configure, as farstream 0.2 support is not
  avaialble yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Fix build on openSUSE &lt; 12.2: inverted %if needs some brackets
  if it's a more complex statement.</changelog>
<changelog author="christoph.miebach@web.de" date="1360929600">- Update to version 2.10.7 (bnc#804742):
  + Alien hatchery:
  - No changes
  + General:
  - The configure script will now exit with status 1 when
    specifying invalid protocol plugins using the
  - -with-static-prpls and --with-dynamic-prpls arguments.
    (pidgin.im#15316)
  + libpurple:
  - Fix a crash when receiving UPnP responses with abnormally
    long values. (CVE-2013-0274)
  - Don't link directly to libgcrypt when building with GnuTLS
    support. (pidgin.im#15329)
  - Fix UPnP mappings on routers that return empty &lt;URLBase/&gt;
    elements in their response. (pidgin.im#15373)
  - Tcl plugin uses saner, race-free plugin loading.
  - Fix the Tcl signals-test plugin for savedstatus-changed.
    (pidgin.im#15443)
  + Pidgin:
  - Make Pidgin more friendly to non-X11 GTK+, such as
    MacPorts' +no_x11 variant.
  + Gadu-Gadu:
  - Fix a crash at startup with large contact list. Avatar
    support for buddies will be disabled until 3.0.0.
    (pidgin.im#15226, pidgin.im#14305)
  + IRC:
  - Support for SASL authentication. (pidgin.im#13270)
  - Print topic setter information at channel join.
    (pidgin.im#13317)
  + MSN:
  - Fix SSL certificate issue when signing into MSN for some
    users.
  - Fix a crash when removing a user before its icon is loaded.
    (pidgin.im#15217)
  + MXit:
  - Fix a bug where a remote MXit user could possibly specify a
    local file path to be written to. (CVE-2013-0271)
  - Fix a bug where the MXit server or a man-in-the-middle could
    potentially send specially crafted data that could overflow
    a buffer and lead to a crash or remote code execution.
    (CVE-2013-0272)
  - Display farewell messages in a different colour to
    distinguish them from normal messages.
  - Add support for typing notification.
  - Add support for the Relationship Status profile attribute.
  - Remove all reference to Hidden Number.
  - Ignore new invites to join a GroupChat if you're already
    joined, or still have a pending invite.
  - The buddy's name was not centered vertically in the
    buddy-list if they did not have a status-message or mood
    set.
  - Fix decoding of font-size changes in the markup of received
    messages.
  - Increase the maximum file size that can be transferred to
    1 MB.
  - When setting an avatar image, no longer downscale it to
    96x96.
  + Sametime:
  - Fix a crash in Sametime when a malicious server sends us an
    abnormally long user ID. (CVE-2013-0273)
  + Yahoo!:
  - Fix a double-free in profile/picture loading code.
    (pidgin.im#15053)
  - Fix retrieving server-side buddy aliases. (pidgin.im#15381)
  + Plugins:
  - The Voice/Video Settings plugin supports using the sndio
    GStreamer backends. (pidgin.im#14414)
  - Fix a crash in the Contact Availability Detection plugin.
    (pidgin.im#15327)
  - Make the Message Notification plugin more friendly to
    non-X11 GTK+, such as MacPorts' +no_x11 variant.
  + Windows-Specific Changes:
  - Compile with secure flags (pidgin.im#15290)
  - Installer downloads GTK+ Runtime and Debug Symbols more
    securely. (pidgin.im#15277)
  - Updates to a number of dependencies, some of which have
    security related fixes. (pidgin.im#14571, pidgin.im#15285,
    pidgin.im#15286)
    . ATK 1.32.0-2
    . Cyrus SASL 2.1.25
    . expat 2.1.0-1
    . freetype 2.4.10-1
    . gettext 0.18.1.1-2
    . Glib 2.28.8-1
    . libpng 1.4.12-1
    . libxml2 2.9.0-1
    . NSS 3.13.6 and NSPR 4.9.2
    . Pango 1.29.4-1
    . SILC 1.1.10
    . zlib 1.2.5-2
  - Patch libmeanwhile (sametime library) to fix crash.
    (pidgin.im#12637)</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Add pidgin-irc-sasl.patch: link irc module to SASL. Allows the
  IRC module to be loaded (bnc#806975).</changelog>

</package>
<package pkgid="51a9a1c3d01f91bf7922354bea5819ce387de4c676e0c14d2621925bffc2c5e3" name="freeradius-server" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="e6e9311f9782c307e1c013be765a6ff4c7c26eea86856858cb5cc5b4fa331df6" name="freeradius-server-devel" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="f6c25ed7aaf27c20cc406568bb22884b569a819cd056c8dfb2e0bf3e9f310a81" name="freeradius-server-dialupadmin" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="918e916ca9fc4c17e86c72aa2c00aea0bd08d5c3807ca10efbc8ab7d082dca19" name="freeradius-server-doc" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="e3eb63986d0d3e6051263a2b306a64360a948d5c8d707f8af315e266458bdb95" name="freeradius-server-libs" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="1277e09313d35c40d187e0daa34bcf7b6af3092a05bdde03c0ac943953e14c51" name="freeradius-server-utils" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="3.4.1"/>

<changelog author="coolo@novell.com" date="1245412800">- disable as-needed for this package as it fails to build with it</changelog>
<changelog author="puzel@novell.com" date="1255608000">- freeradius-server-sha1-default.patch (bnc#546042)
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)</changelog>
<changelog author="puzel@novell.com" date="1256212800">- freeradius-server-no-default-case.patch (bnc#527742)</changelog>
<changelog author="puzel@novell.com" date="1261051200">- update to 2.1.7
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="puzel@novell.com" date="1268136000">- update to 2.1.8
  - for full list of changes, please see
  /usr/share/doc/packages/freeradius-server/ChangeLog
- drop freeradius-server-no-default-case.patch: fixed upstream</changelog>
<changelog author="puzel@novell.com" date="1268308800">- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
- clean up specfile
- remove bind-libs, zlib-devel from BuildRequires - not needed</changelog>
<changelog author="puzel@novell.com" date="1269172800">- specfile cleanup</changelog>
<changelog author="puzel@novell.com" date="1272888000">- add freeradius-server-initscript-pidfile.patch
  - handle /var/run on tmpfs</changelog>
<changelog author="puzel@novell.com" date="1277121600">- update to 2.1.9 (bnc#615699)
  - bugfix release, for list of changes please see
  /usr/share/doc/packages/freeradius-server/ChangeLog</changelog>
<changelog author="pgajdos@suse.cz" date="1284638400">- radiusd reload after logrotate [bnc#634445]</changelog>
<changelog author="puzel@novell.com" date="1286193600">- update to 2.1.10
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1306238400">- Supress timestamps in binaries, breaks build-compare.</changelog>
<changelog author="puzel@novell.com" date="1308916800">- update to 2.1.11
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
- add freeradius-server-snprintf-overflow.patch
- use spec-cleaner</changelog>
<changelog author="vcizek@suse.com" date="1317124800">- fixed interaction with eDirectory (bnc#720620)</changelog>
<changelog author="vcizek@suse.com" date="1319025600">- update to 2.1.12
    Feature improvements
  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
  dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
  * Added support for PCRE from Phil Mayers
  * Configurable file permission in rlm_linelog
  * Added "relaxed" option to rlm_attr_filter.  This copies attributes
  if at least one match occurred.
  * Added documentation on dynamic clients.
  See raddb/modules/dynamic_clients.
  * Added support for elliptical curve cryptography.
  See ecdh_curve in raddb/eap.conf.
  * Added support for 802.1X MIBs in checkrad
  * Added support for %{rand:...}, which generates a uniformly
  distributed number between 0 and the number you specify.
  * Created "man" pages for all installed commands, and documented
  options for all commands.  Patch from John Dennis.
  * Allow radsniff to decode encrypted VSAs and CoA packets.
  Patch from Bjorn Mork.
  * Always send Message-Authenticator in radtest. Patch from John Dennis.
  radclient continues to be more flexible.
  * Updated Oracle schema and queries
  * Added SecurID module.  See src/modules/rlm_securid/README
    Bug fixes
  * Fix memory leak in rlm_detail
  * Fix "failed to insert event"
  * Allow virtual servers to be reloaded on HUP.
  It no longer complains about duplicate virtual servers.
  * Fix %{string:...} expansion
  * Fix "server closed socket" loop in radmin
  * Set ownership of control socket when starting up
  * Always allow root to connect to control socket, even if
  "uid" is set.  They're root.  They can already do anything.
  * Save all attributes in Access-Accept when proxying inner-tunnel
  EAP-MSCHAPv2
  * Fixes for DHCP relaying.
  * Check certificate validity when using OCSP.
  * Updated Oracle "configure" script
  * Fixed typos in dictionary.alvarion
  * WARNING on potential proxy loop.
  * Be more aggressive about clearing old requests from the
  internal queue
  * Don't open network sockets when using -C
- freeradius-server-snprintf-overflow.patch merged in upstream</changelog>
<changelog author="joop.boonen@opensuse.org" date="1336996800">- Enable the same CFLAGS as for other hardware</changelog>
<changelog author="vcizek@suse.com" date="1338206400">- Use the new 'su' logrotate option (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347278400">- update to 2.2.0
  - see /usr/share/doc/packages/freeradius-server/ChangeLog
    for complete list of changes in this release
  - fixes CVE-2012-3547 (bnc#777834)
  - dropped freeradius-server-2.1.6-overflow.patch (upstream)
  - dropped freeradius-server-sha1-default.patch (upstream)
  - refreshed freeradius-server-fix-cert-bootstrap.patch</changelog>
<changelog author="vcizek@suse.com" date="1349092800">- files in sites-available/ are now %config(noreplace) [bnc#781756]</changelog>
<changelog author="vcizek@suse.com" date="1363262400">- fixed a bug in the logrotate script (bnc#797292)</changelog>

</package>
<package pkgid="c46e07ce4110f58940c05e46651a0ac0d1758981e9e44012156a579486a681c6" name="nss_ldap" arch="x86_64">
    <version epoch="0" ver="265" rel="19.5.1"/>

<changelog author="rhafer@novell.com" date="1242734400">- updated to nss_ldap-264. From the changelog:
  * fix for PADL-Bug#378: MAP_H_ERRNO() should map NSS_TRYAGAIN
    to NETDB_INTERNAL not TRY_AGAIN
  * fix for PADL-Bug#379: ldaps:// URIs only work if "ssl on"
    is set
  * fix for PADL-Bug#248: nss_ldap exposes malformed entries to the
    system
  * fix for PADL-Bug#374: nss_ldap returns success from setnetgrent()
    when the requested netgroup doesn't exist
  * fix for PADL-Bug#376: getXXent() only returns NULL once before
    implicitly calling setXXent(), whereas other backends continue
    to return NULL</changelog>
<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="rhafer@novell.com" date="1260878400">- Update to nss_ldap-265. From the changelog:
  * fix for PADL-Bug#132: add versioning information to binary
  * fix for PADL-Bug#403: add AM_MAINTAINER_MODE
  * fix for PADL-Bug#388: bad LDAP query for ether lookups
  * fix for PADL-Bug#391: clarify bind timelimit defaults
    in ldap.conf
  * fix for PADL-Bug#392: call do_close() if ldap_result()
    or ldap_parse_result() fails (before returning
    NSS_UNAVAIL)
  * fix for PADL-Bug#409: deallocate context in
    _nss_ldap_ent_context_release() to avoid bad usage
  * fix for PADL-Bug#410: don't leak file descriptors in
    _nss_ldap_readconfig</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
<changelog author="rhafer@suse.de" date="1295265600">- A memory leak in nss_ldap could lead to processes (e.g. nscd)
  growing extremely large (bnc#659100, PADL-Bug#418)
- nss_ldap didn't try to reconnect properly when the LDAP
  connection was lost between two getXXent() calls
  (bnc#662752, PADL-Bug#215)</changelog>
<changelog author="rhafer@suse.de" date="1319803200">- Entries with invalid (or too large) uidNumber/gidNumber attributes
  could crash nss_ldap (bnc#726393)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1350561600">- fix build with possix correctly set (added to nss_ldap.dif)</changelog>
<changelog author="tchvatal@suse.com" date="1359374400">- Fix segfault when using with glibc-2.16 and linking with pthread.
  * adds patches:
    nss_ldap-265-glibc-2.16.patch (PADL-Bug#445)
    nss_ldap-265-pthread.patch (PADL-Bug#446)</changelog>
<changelog author="rhafer@suse.com" date="1363348800">- ldap.conf is now part of nss_ldap since pwdutils was dropped
  (bnc#809245)
- removed no longer needed %post scriptlet</changelog>

</package>
<package pkgid="649e7f28540c9d3222047e3224f5b78b0218210dfe99002523d01ba600c2bac6" name="nss_ldap-32bit" arch="x86_64">
    <version epoch="0" ver="265" rel="19.5.1"/>

<changelog author="rhafer@novell.com" date="1242734400">- updated to nss_ldap-264. From the changelog:
  * fix for PADL-Bug#378: MAP_H_ERRNO() should map NSS_TRYAGAIN
    to NETDB_INTERNAL not TRY_AGAIN
  * fix for PADL-Bug#379: ldaps:// URIs only work if "ssl on"
    is set
  * fix for PADL-Bug#248: nss_ldap exposes malformed entries to the
    system
  * fix for PADL-Bug#374: nss_ldap returns success from setnetgrent()
    when the requested netgroup doesn't exist
  * fix for PADL-Bug#376: getXXent() only returns NULL once before
    implicitly calling setXXent(), whereas other backends continue
    to return NULL</changelog>
<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement glibc-32bit/glibc-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="rhafer@novell.com" date="1260878400">- Update to nss_ldap-265. From the changelog:
  * fix for PADL-Bug#132: add versioning information to binary
  * fix for PADL-Bug#403: add AM_MAINTAINER_MODE
  * fix for PADL-Bug#388: bad LDAP query for ether lookups
  * fix for PADL-Bug#391: clarify bind timelimit defaults
    in ldap.conf
  * fix for PADL-Bug#392: call do_close() if ldap_result()
    or ldap_parse_result() fails (before returning
    NSS_UNAVAIL)
  * fix for PADL-Bug#409: deallocate context in
    _nss_ldap_ent_context_release() to avoid bad usage
  * fix for PADL-Bug#410: don't leak file descriptors in
    _nss_ldap_readconfig</changelog>
<changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
<changelog author="rhafer@suse.de" date="1295265600">- A memory leak in nss_ldap could lead to processes (e.g. nscd)
  growing extremely large (bnc#659100, PADL-Bug#418)
- nss_ldap didn't try to reconnect properly when the LDAP
  connection was lost between two getXXent() calls
  (bnc#662752, PADL-Bug#215)</changelog>
<changelog author="rhafer@suse.de" date="1319803200">- Entries with invalid (or too large) uidNumber/gidNumber attributes
  could crash nss_ldap (bnc#726393)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1350561600">- fix build with possix correctly set (added to nss_ldap.dif)</changelog>
<changelog author="tchvatal@suse.com" date="1359374400">- Fix segfault when using with glibc-2.16 and linking with pthread.
  * adds patches:
    nss_ldap-265-glibc-2.16.patch (PADL-Bug#445)
    nss_ldap-265-pthread.patch (PADL-Bug#446)</changelog>
<changelog author="rhafer@suse.com" date="1363348800">- ldap.conf is now part of nss_ldap since pwdutils was dropped
  (bnc#809245)
- removed no longer needed %post scriptlet</changelog>

</package>
<package pkgid="da7a0c253c7cf7686fa8bcbd4c6d9384b671a51c1b2f0cd493b7b33117f2f1ae" name="xtrabackup" arch="x86_64">
    <version epoch="0" ver="2.0.5" rel="2.4.1"/>

<changelog author="lenz@grimmer.com" date="1239278400">- Initial package added to the openSUSE Build Service (Version 0.5)
  Fri Mar 13 00:00:00 UTC 2009 - Vadim Tkachenko
- initial release</changelog>
<changelog author="lenz@grimmer.com" date="1241092800">- Update to version 0.6</changelog>
<changelog author="lenz@grimmer.com" date="1244548800">- Update to version 0.7</changelog>
<changelog author="andreas.stieger@gmx.de" date="1335355200">- add mysql-5.1.59.tar.gz
- add mysql-5.5.17.tar.gz
- add .changes file
- build with RPM_OPT_FLAGS
- update project URL
- add HTML documentation built from source
- update to upstream 2.0.0:
  * Percona XtraBackup can now save Galera replication information while
  performing a backup when given the --galera-info option to innobackupex.
  * XtraBackup now supports compressed backups. These backups can be done in a
  parallel way, thus utilizing multiple CPU cores if needed. In previous
  versions, compression was only possible with streaming backups + external
  (usually single-threaded) compression utilities, which also had a number of
  other limitations (e.g. could not be used with parallel file copying, it was
  required to uncompress the entire backup to restore a single table).
  * Percona XtraBackup now supports streaming incremental backups. In previous
  versions streaming backups were performed by the innobackupex script but
  incremental backups were done by the xtrabackup binary which calculated deltas
  by scanning data files. Which meant those two feature were mutually exclusive,
  i.e. one couldn’t do streaming incremental backups.
  * As part of the backup, the LRU dump is now included as well.
  * Support for compiling and running Percona XtraBackup against debug versions of
  InnoDB. This is only for very advancedusers.
- For fixes included in previous releases, see
  http://www.percona.com/doc/percona-xtrabackup/release-notes.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1338206400">- remove HTML documentation in favour of online documentation
  to fix factory build, also simplifies license.
- require cmake &gt;= 2.8.5 to catch this requirement in OBS earlier
  when building for SLE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1338292800">- cmake &gt;= 2.6.3 is the actual minimum requirement, fixes 11.4</changelog>
<changelog author="andreas.stieger@gmx.de" date="1341662400">- update to 2.0.1:
  * After creating a full compressed backup, performing a
    compressed/uncompressed incremental backup would fail because
    xtrabackup_checkpoints was compressed. This has been fixed by
    omitting xtrabackup_checkpoints from compression, so that a full
    backup could be used for incremental backups without decompression.
  * --copy-back was copying compressed *.qp files as well. This has been
    fixed by skipping the compressed files while copying the data back.
  * Streaming backups with --stream=tar would fail if the file size was
    bigger than 8GB. Fixed by changing the libarchive format from USTAR
    to restricted PAX which supports bigger file sizes.
  * innobackupex was  calling the tar utility unconditionally when
    streaming ib_lru_dump and xtrabackup_galera_info. Which led to a
    broken stream when the xbstream format was used.
  * when --compress was used together with --stream=tar, xtrabackup was
    silently creating a broken backup. Now it fails with an error
    instead, suggesting to either use xbstream, or don't use compression
    at all.
  * --safe-slave-backup was resulting in incorrect binlog info, because
    in some cases innobackupex confused the response from SHOW SLAVE
    STATUS with the one from SHOW MASTER STATUS.
  * xbstream would  sometimes fail while extracting the backup.
  * innodb_data_file_path was not written to backup-my.cnf, this was a
    regression introduced in previous version.
  * XtraBackup would fail to find the datadir when using mysqld_multi.
    This was fixed by adding new option --defaults-group, to both
    innobackupex and xtrabackup, now it can be specified which section
    of my.cnf to handle.
  * InnoDB tables with names containing: opt, par, CSV, MYD were backed
    up twice. These tables were backed up by xtrabackup binary and by
    innobackupex script. Regular expression for filtering database
    directory contents was fixed.
  * When run innobackupex with --apply-log, it was reading configuration
    from the server configuration file instead of backup-my.cnf in
    backup directory.
  * innobackupex could copy files to a wrong directory when merging an
    incremental backup to a full one.
  * Incremental backups were not working correctly with --stream=tar.
    This was fixed by making --incremental-lsn incompatible with
  - -stream=tar. XtraBackup will fail with an error message suggesting
    to use --stream=xbstream.
  * innobackupex failed to copy-back backup if destination dir wasn't
    empty. Exceptions were added for my.cnf and master.inf` as
    XtraBackup doesn't backup those files, so it won't overwrite
    anything.
  * innobackupex --copy-back could skip some files when copying from a
    Windows filesystem mounted over NFS.
  * XtraBackup binary was leaking file descriptors on --backup. This was
    fixed by reusing the existing file descriptor so no leak occurs.
  * There were no source files in tar.gz archive for Percona XtraBackup
    2.0.0.
  * XtraBackup|binary could fail with the log block checksum mismatch"
    error when reading an partially written log block.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1343995200">- remove documentation from MySQL and xtrabackup tarballs due to license</changelog>
<changelog author="andreas.stieger@gmx.de" date="1344081600">- add xtrabackup-nodoc.sh to source package - removes documentation
  from pristine upstream source packages when maintaining package.
  Not used during build or in binary package.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1344945600">- update to 2.0.2
  * Fixed false positive test suite failures with grep 2.10
  * Incremental backup would fail if a tablespace was created
    between full and incremental backups.
  * Assertion error in creating a compressed tablespace at delta
    apply time has been fixed.
  * If the table was renamed after the full backup, but before the
    incremental backup has been taken, incremental backups would
    fail when being prepared.
  * When the variable innodb_log_block_size was set to 4096, backups
    would fail in the prepare stage.
  * Additional incremental backup tests have been added for the
    incremental backup data page copy.
- update percona-xtrabackup-2.0.2-nodoc.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1349179200">- update to 2.0.3
- new features:
  * innobackupex now supports new --move-back option that can be used
    instead of --copy-back in case there isn’t enough free disk space
    on the server to copy files. As this option removes backup files,
    it must be used with caution.
- bug fixes:
  * Symlink for innobackupex-1.5.1 binary has been broken in the
    previous version of XtraBackup.
  * XtraBackup 2.0.2 was not backwards compatible which caused
    incremental backups created with previous versions to fail on
    prepare.
  * Fix a regression that may potentially lead to a 5x increase in
    disk space occupied by incremental backups.
  * Fix a regression which caused incorrect handling of compressed
    tablespaces with the page size of 16K, that were created between
    the last full or incremental and the next incremental backup.
- packaging changes:
  * improve upgrade from generic packages</changelog>
<changelog author="andreas.stieger@gmx.de" date="1354708800">- update to 2.0.4
  + a regression introduced in XtraBackup 2.0.2 caused incremental
    backups to fail because the init parameter values were not
    normalized to the values used inside InnoDB
  + a regression introduced in traBackup 2.0.2 didn’t take the
    separate doublewrite tablespace into an account
  + XtraBackup was handling the separate doublewrite buffer file
    incorrectly. File path of the doublewrite buffer wasn’t added
    to the backup-my.cnf and after the restore old doublewrite buffer
    file was used instead of one made during the prepare stage
  + XtraBackup now accepts the --innodb=force option, previously it
    would throw an error if the option was set
  + Option safe-slave-backup wasn’t working correctly
  + In case safe-slave-backup-timeout was reached when using the
    safe-slave-backup option, SQL_THREAD was left in stopped state
    causing the slave thread to lag behind. This was fixed by
    checking the initial SQL_THREAD state and starting it before
    terminating with a timeout error and starting the SQL_THREAD
    only if it was running initially.
  + In case of streaming backups, innobackupex would resume the
    Xtrabackup process and then wait for it to finish before running
    UNLOCK TABLES. This caused database to be unnecessarily locked
    with FLUSH TABLES WITH READ LOCK. Innobackupex now waits only
    till log copying is finished to unlock the databases
  + XtraBackup would fail on --apply-log when filesystem didn’t
    support Linux AIO
  + XtraBackup binary would ignore innodb_use_native_aio when it’s
    specified either in my.cnf or as a command line option
  + XtraBackup would print a warning message during the prepare
    stage about innodb_file_io_threads being deprecated, even if the
    variable wasn’t set
  + XtraBackup Galera tests can now be run concurrently</changelog>
<changelog author="andreas.stieger@gmx.de" date="1363262400">- update to 2.0.5
- new features:
  + New option --defaults-extra-file to read options before the
    standard defaults-file, e.g. for separate username/passwords
    crontab or a script somewhere in the system.
- bugs fixed:
  + In case of streaming backups, innobackupex would resume the
    XtraBackup process and then wait for it to finish before
    running UNLOCK TABLES. This caused database to be unnecessarily
    locked with FLUSH TABLES WITH READ LOCK. Innobackupex now waits
    only till log copying is finished to unlock the databases.
  + innobackupex error messages referencing the data directory
    have been extended to show the path of the data directory
    mentioned in the error message.
  + Partitioned tables were not correctly handled by the
  - -databases, --include, --tables-file options of innobackupex,
    and by the --tables and --tables-file options of XtraBackup.
  + When built-in compression was used, XtraBackup was doing
    unbuffered writes to the destination file or stream in very
    small chunks which in return caused inefficient I/O.
  + Unnecessary long sleep() in innobackupex lead to FLUSH TABLES
    WITH READ LOCK taking too long.
  + If innobackupex would crash it would leave the xtrabackup_suspended
    file on the filesystem. This could then cause innobackupex to think
    XtraBackup has suspended itself the moment it started, and then when
    XtraBackup actually does suspend itself, innobackupex would wait for
    it to end and wouldn’t re-remove the suspend file, leading to a wait
    deadlock.
  + innobackupex would fail to recognize MariaDB 5.2 and MariaDB 5.3
- fix path of MySQL 5.5 xtrabackup binary [bnc#809505]</changelog>

</package>
<package pkgid="b43aba17b102c5714b3d03c02e02418066c1322e6bb94bcb6aabc7738ae19b30" name="yum-metadata-parser" arch="x86_64">
    <version epoch="0" ver="1.1.2" rel="122.14.1"/>

<changelog author="cthiel@suse.de" date="1154779200">- added yum-metadata-parser-1.0-quiet.patch from Fedora</changelog>
<changelog author="cthiel@suse.de" date="1168257600">- update to version 1.0.3
  * sqlitecache.c: Never use the default glib log handler.  This way, when
  - d0 is passed, we won't output to the glib log handler (since nothing
    should be displayed at all).
  * sqlitecachec.py: support newer pysqlite as included in python 2.5
  * sqlitecache.c: Use structs and function pointers to reduce code
    duplication.
  * sqlitecache.c, sqlitecachec.py: Display repoid while populating the
    cache.</changelog>
<changelog author="cthiel@suse.de" date="1171627200">- remove Requires: yum</changelog>
<changelog author="cthiel@suse.de" date="1171627200">- Requires: python-sqlite</changelog>
<changelog author="cthiel@suse.de" date="1175860800">- update to version 1.0.4
  * db.c: Create a pkgKey index for provides, requires, conflicts, and
    obsoletes
  * db.c, db.h, package.h, sqlitecache.c, xml-parser.c: include Prereqs</changelog>
<changelog author="cthiel@suse.de" date="1178193600">- update to version 1.1.0
  * setup.py, yum-metadata-parser.spec: bump version to 1.1.0 b/c of the
    dbversion change
  * db.c, db.h, package.h, xml-parser.c: Bump database version to 10 build_*
    and time_* values are stored as ints, rather than text, and
    checksum_value has been dropped, as this is the same value as pkgId.
  * xml-parser.c: Reduce some code duplication in xml-parser</changelog>
<changelog author="cthiel@suse.de" date="1179748800">- update to version 1.1.1
  * Expose DBVERSION</changelog>
<changelog author="cthiel@suse.de" date="1188388800">- update to version 1.1.2
  * add some indexes to speed up a number of lookups in yum</changelog>
<changelog author="dmacvicar@suse.de" date="1360670400">- support &gt;2G rpms in the XML to sqlite conversion (upstream patch)
  (bnc#802576, rh#612409)</changelog>
<changelog author="bbrunner@suse.com" date="1363780800">- Fixed release-version</changelog>

</package>

</otherdata>